Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Eclipse Mnestix 2.3.0 Clear all filters
TI-2026-84191 CVE-2026-89293 · GHSA-qfmx-cr8f-4rw3

Missing authorization in Eclipse Mnestix Browser admin actions

Priority MEDIUM 44

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0046 Published 2026-11-03 Fixed in 2.3.0 CWE-602
TI-2026-84190 CVE-2026-89292 · GHSA-c7g8-f337-8fr6

Server-side request forgery in Eclipse Mnestix Browser leaks API key

Priority MEDIUM 46

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00453 Published 2026-11-03 Fixed in 2.3.0 CWE-522