// CVE · PUBLISHED 2026-11-03
CVE-2026-89292 Eclipse Foundation / Eclipse Mnestix
9.2 · CVSS 4.0 Critical
Description In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Eclipse Foundation / Eclipse Mnestix Published 3 Nov 2026 Modified 3 Nov 2026 CVSS 9.2 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source emo@eclipse.org CWE CWE-522 , CWE-918 Record status Received