High severityGHSA Advisory· Published May 22, 2026· Updated May 22, 2026
CVE-2026-40596
CVE-2026-40596
Description
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated user to inject arbitrary HTML by updating their account's font family. Upon exploitation, an XSS payload would be reflected on every MantisBT page. Leveraging another vulnerability (CSP bypass, see GHSA-9c3j-xm6v-j7j3), the attacker could achieve account takeover. This issue has been fixed in version 2.28.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mantisbt/mantisbtPackagist | >= 2.11.0, < 2.28.2 | 2.28.2 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-j3v9-553h-x28jghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-40596ghsaADVISORY
- github.com/mantisbt/mantisbt/commit/9e8409cdd979eba86ef532756fc47c1d8112d22dnvdWEB
- github.com/mantisbt/mantisbt/security/advisories/GHSA-9c3j-xm6v-j7j3nvdWEB
- github.com/mantisbt/mantisbt/security/advisories/GHSA-j3v9-553h-x28jnvdWEB
- mantisbt.org/bugs/view.phpnvdWEB
- mantisbt.org/bugs/view.phpnvdWEB
News mentions
0No linked articles in our index yet.