MantisBT XSS Account Takeover via Font Preference (CVE-2026-4596)

github.com 2026-05-23查看中文 →

Security AdvisoryCVE-2026-4596HighMantisBT

Affected:

>= 2.11.0, <= 2.28.1

Fixed in:

2.28.2

Referenced CVEs: CVE-2026-40596

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Storage XSS Vulnerability Fix and Jinja2 Template Escaping Guidance 2026-08-03 Meesho Android App Unsecured Storage of PII and Auth Tokens in SharedPreferences 2026-08-03 PentAGI Agent RCE and Container Escape Vulnerability via Unchecked Binary Execution 2026-08-03 Bouncy Castle HSS Public Key Unbounded Memory Allocation DoS (CVE-2026-58060) 2026-08-03 CVE-2026-58061: Bouncy Castle CCM-mode Unauthenticated Decryption Vulnerability 2026-08-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive