CVE-2026-92796
Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 16, 2026
- Updated
- Sep 21, 2026
- Reserved
- Sep 16, 2026
Description
Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtain password hashes that authenticate as administrators without plaintext recovery.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Manticore Searchmanticoresoftware |
|
References
- Researcher write-uptechnical-descriptionexploit
- GitHub Issue #4706issue-tracking
- 28.4.4 checks every statement in the requestpatch
- https://github.com/manticoresoftware/manticoresearchproduct
- VulnCheck Advisory: Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypassthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.