Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-f45p-8pbv-ducc
Vulnerability ID VCID-f45p-8pbv-ducc
Aliases CVE-2026-34754
GHSA-h4x5-gvx6-3rwc
Summary
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-284 Improper Access Control
System Score Found at
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2026-34754
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-h4x5-gvx6-3rwc
cvssv3.1 4.3 https://github.com/mantisbt/mantisbt
generic_textual MODERATE https://github.com/mantisbt/mantisbt
cvssv3.1 4.3 https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
generic_textual MODERATE https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
ssvc Track https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
cvssv3.1 4.3 https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
cvssv3.1_qr MODERATE https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
generic_textual MODERATE https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
ssvc Track https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
cvssv3.1 4.3 https://mantisbt.org/bugs/view.php?id=36976
generic_textual MODERATE https://mantisbt.org/bugs/view.php?id=36976
ssvc Track https://mantisbt.org/bugs/view.php?id=36976
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-34754
https://github.com/mantisbt/mantisbt
https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
https://mantisbt.org/bugs/view.php?id=36976
GHSA-h4x5-gvx6-3rwc https://github.com/advisories/GHSA-h4x5-gvx6-3rwc
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/mantisbt/mantisbt
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T15:07:20Z/ Found at https://github.com/mantisbt/mantisbt/commit/b262b4d2835b81394d75356dead66e52a6275206
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T15:07:20Z/ Found at https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h4x5-gvx6-3rwc
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Found at https://mantisbt.org/bugs/view.php?id=36976
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T15:07:20Z/ Found at https://mantisbt.org/bugs/view.php?id=36976
Exploit Prediction Scoring System (EPSS)
Percentile 0.08492
EPSS Score 0.00028
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T23:08:36.142516+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0