What is GHSA-qfmx-cr8f-4rw3?

GHSA-qfmx-cr8f-4rw3 is a security advisory published by GitHub Security Advisories with High severity. In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an...

Which CVE IDs does GHSA-qfmx-cr8f-4rw3 cover?

GHSA-qfmx-cr8f-4rw3 covers the following CVE IDs: CVE-2026-89293. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qfmx-cr8f-4rw3High

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an...

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-89293 →

📋 Description

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-89293
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/301
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/772
https://github.com/advisories/GHSA-qfmx-cr8f-4rw3