Packagist/mantisbt/mantisbt CVE-2026-34579: medium 5.3, EPSS 0.36%

MantisBT has an authorization bypass in private issue monitoring

Action: Upgrade mantisbt/mantisbt to 2.28.2 or later.

composer require mantisbt/mantisbt:2.28.2

Affected

Fixed versions

Sources

• osv: GHSA-ggw7-9675-6v4v
• nvd: CVE-2026-34579
• https://github.com/mantisbt/mantisbt/security/advisories/GHSA-ggw7-9675-6v4v
• https://github.com/mantisbt/mantisbt/commit/0a93267deba445fb9d15250c16e6fdb1246ffa65
• https://github.com/mantisbt/mantisbt
• https://mantisbt.org/bugs/view.php?id=36975

CVE-2026-34579 · published 2026-05-11T19:32:22Z · modified 2026-09-10T03:51:05.765789042Z · JSON