{"action":"Upgrade mantisbt/mantisbt to 2.28.4 or later.","affected":[{"fixed":"2.28.4","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2026-47156"],"ecosystem":"Packagist","epss":0.00686,"exploited":false,"fixed_versions":["2.28.4"],"ghsa_id":"GHSA-c2xg-qjqw-2v98","id":"tcs_01M5KF0FKHKCWXGP92MX11R8NW","modified_at":"2026-07-15T17:11:43.600641Z","published_at":"2026-07-15T16:45:22Z","references":["https://osv.dev/vulnerability/GHSA-c2xg-qjqw-2v98","https://github.com/mantisbt/mantisbt/security/advisories/GHSA-c2xg-qjqw-2v98","https://github.com/mantisbt/mantisbt/commit/e3571c319b1721b41b0dc4b5b5203cbdcbe0c2ee","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=37121"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-c2xg-qjqw-2v98","url":"https://osv.dev/vulnerability/GHSA-c2xg-qjqw-2v98"},{"source":"nvd","source_id":"CVE-2026-47156","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47156"}],"summary":"MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator"}