Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:13:03 +0000 CVE-2026-34754 — MantisBT allows unauthorized users to upload attachments to restricted issues via REST API https://cve.radiocsirt.org/vuln/cve-2026-34754 <p><strong>Affected:</strong> mantisbt</p> <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.</p> <p><strong>Affected:</strong> mantisbt</p> <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-34754