Vulnerability in Mantisbt

CVE-2026-30849

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an improper type checking on t…

EPSS: 0.001 (33.8th percentile) — read the EPSS interpretation.

Affected products

Mantisbt — versions < 2.28.1

Weakness classification (CWE)

CWE-305 — Authentication Bypass by Primary Weakness

References

https://github.com/mantisbt/mantisbt/security/advisories/GHSA-phrq-pc6r-f6gh (x_refsource_CONFIRM)
https://github.com/mantisbt/mantisbt/commit/b349e5c890eeda9bd82e7c7e14479853f8a30d9f (x_refsource_MISC)