Do Son MantisBT patches a critical 9.3 CVSS auth bypass (CVE-2026-30849) and high-severity XSS flaws. Learn how MySQL type conversion opens the door. Update now!
SOAP API
If left unpatched, the CVE-2024-33891 (CVSS 8.8) vulnerability allows attackers to bypass authentication completely