Skip to content
OpenAdvisories

Vendor

mantisbt

36 known vulnerabilities.

Products

mantisbt 36
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-47156

    MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

    MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mci_check_login() function. Any user knowing any valid cookie_string can authenticate as any other user (knowing their username), in…

    mantisbt mantisbt mantisbt/mantisbt Packagist
  • Critical 9.3
    CVE-2026-30849 Public exploit Scanner template

    MantisBT SOAP API has an authentication bypass vulnerability on MySQL

    Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an improper type checking on the password paramete…

    mantisbt mantisbt mantisbt/mantisbt Packagist