CVE-2026-89292

UNKNOWN 0.0

Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

CWE	CWE-918 CWE-522
Vendor	eclipse foundation
Product	eclipse mnestix
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse mnestix

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse mnestix are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Eclipse Foundation / Eclipse Mnestix

1.6.0 < 2.3.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

gitlab.eclipse.org: https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/773 gitlab.eclipse.org: https://gitlab.eclipse.org/security/cve-assignment/-/work_items/302

Credits

Eclipse Foundation Security Team