Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse Mnestix

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-89295

    Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter

    In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied count parameter of the GET /api/v1/IdGenerator/submodelIds/{count} and GET /api/v2/IdGenerator/submodelIds/{count} endpoints is not en…

    Eclipse Foundation Eclipse Mnestix
  • High 8.8
    CVE-2026-89293

    Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering

    In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling …

    Eclipse Foundation Eclipse Mnestix