mantisBT vulnerabilities

CVEs per yearBy the year they were published

1. 20194
2. 20232
3. 20245
4. 20254
5. 202621

Newest CVEs

• CVE-2026-47156

  MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

  mantisbt · mantisbt

  Critical9.3
• CVE-2026-42071

  MantisBT: Private Bugnote Attachment Content Leak via REST API

  mantisbt · mantisbt

  High7.2
• CVE-2026-42070

  MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API

  mantisbt · mantisbt

  Medium5.3
• CVE-2026-44655

  MantisBT: Stored XSS on Move Attachments Admin Page

  mantisbt · mantisbt

  High8.6
• CVE-2026-41897

  MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field

  mantisbt · mantisbt

  Medium5.3
• CVE-2026-44657

  MantisBT: Stored XSS in File Download

  mantisbt · mantisbt

  High7.5
• CVE-2026-40607

  MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Column

  mantisbt · mantisbt

  High7.5
• CVE-2026-40598

  MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page

  mantisbt · mantisbt

  Medium6.9
• CVE-2026-40597

  MantisBT has a Content Security Policy bypass via attachments

  mantisbt · mantisbt

  High7.6
• CVE-2026-40596

  MantisBT is vulnerable to XSS and potential account takeover via user font family preference update

  mantisbt · mantisbt

  High7.2