[CRITICAL] MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

PKSA-vcbb-b851-hxr5 CVE-2026-47156 GHSA-c2xg-qjqw-2v98

Affected package: mantisbt/mantisbt

Affected version: <=2.28.3

Reported by:
GitHub