CVE-2026-92796
Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtain password hashes that authenticate as administrators without plaintext recovery.
| CWE | CWE-863 |
| Vendor | manticoresoftware |
| Product | manticore search |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for manticoresoftware manticore search
Be the first to know when new high vulnerabilities affecting manticoresoftware manticore search are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
manticoresoftware / Manticore Search
27.0.0 < 28.4.4
References
github.com: https://github.com/geo-chen/oss/blob/main/manticoresearch.md github.com: https://github.com/manticoresoftware/manticoresearch/issues/4706 github.com: https://github.com/manticoresoftware/manticoresearch/blob/release-28.4.4/src/auth/auth_proto_mysql.cpp#L408-L418 github.com: https://github.com/manticoresoftware/manticoresearch vulncheck.com: https://www.vulncheck.com/advisories/manticore-search-27.0.0-before-28.4.4-multi-statement-authorization-bypass
Credits
George Chen