Threats Tagged 'cve-2026-52883'
View all threats tagged with 'cve-2026-52883'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-52883'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-4vpf-w7qv-5h3q: MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIsCVE-2026-52883 0 MantisBT versions prior to 2.28.4 contain a vulnerability in the mc_issue_update SOAP and REST API endpoints where the note_type parameter is not properly validated. This allows users with updater access to inject unauthorized TIME_TRACKING and REMINDER notes. Specifically, TIME_TRACKING notes can be used to inject fake billable hours, corrupting billing reports and potentially leading to incorrect invoicing and flawed project management decisions. REMINDER notes can be faked but do not trigger actual notifications. A patch addressing this issue is available in version 2.28.4. Join the discussion | GCVE Database | 07/15/2026, 18:52:20 UTC Added: 07/16/2026, 10:36:51 UTC |
Showing 1 to 1 of 1 result