A critical vulnerability (CVE-2026-47156) has been identified in MantisBT 2.28.3 and earlier releases.
MantisBT 2.28.4 includes a fix addressing the issue and will be available on Wednesday, July 1st 2026, around 12:00 UTC. Be ready to patch your system right away ! All installations are advised to upgrade as quickly as possible.
Please read our blog post for further details.
Critical Security Issue in MantisBT <= 2.28.3
Moderators: Developer, Contributor