Medium severityNVD Advisory· Published Jul 15, 2026
MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters
CVE-2026-52882
Description
Impact
Users below _report_issues_for_unreleased_versions_threshold_ can assign unreleased product versions.
### Patches - https://github.com/mantisbt/mantisbt/commit/17072d4c322c85f7135ebec3417a6d90b525d12f
Workarounds
None
### Resources - https://mantisbt.org/bugs/view.php?id=37065
Credits
MantisBT thanks Vishal Shukla for discovering and responsibly reporting the issue.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mantisbt/mantisbtPackagist | < 2.28.4 | 2.28.4 |
Affected products
1Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.