CVE-2026-89293

The record

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.

Affected packages

Related vulnerabilities

• CVE-2026-117554 Admidio before 5.0.17 contains an improper access control vulnerability that allows… CWE-602
• CVE-2026-116605 A vulnerability was found in SourceCodester Online Food Ordering System 1.0. CWE-602
• CVE-2026-110314 Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection… CWE-602
• CVE-2026-89175 Smart Video Intercom System developed by Kingdom Communication Associated has a… CWE-602
• CVE-2026-77999 Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to… CWE-602
• CVE-2026-84841 A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. CWE-602
• CVE-2026-77793 The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price… CWE-602
• CVE-2026-84110 A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. CWE-602