A vulnerability was found in mantisbt Mantis Bug Tracker up to 2.28.1. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Attachments Handler. Performing a manipulation results in information disclosure.
This vulnerability is identified as CVE-2026-34744. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.