VulnFeed.org: Eclipse Foundation Eclipse Mnestixhttps://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enCVE-2026-89292: Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructureshttps://vulnfeed.org/cve/CVE-2026-89292/https://vulnfeed.org/cve/CVE-2026-89292/Tue, 03 Nov 2026 10:17:20 +0000In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.CVE-2026-89293: Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tamperinghttps://vulnfeed.org/cve/CVE-2026-89293/https://vulnfeed.org/cve/CVE-2026-89293/Tue, 03 Nov 2026 09:38:23 +0000In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.