Vulnerability · Published Sep 16, 2026 · Assigned by VulnCheck

CVE-2026-92796Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass

High 8.8

In plain English

A high-severity incorrect authorization in Manticore Search from manticoresoftware. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.5%top 55.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtain password hashes that authenticate as administrators without plaintext recovery.

Affected products (as reported)

Vendor	Product	Versions
manticoresoftware	Manticore Search	27.0.0 – before 28.4.4

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Researcher write-up technical-description, exploit
GitHub Issue #4706 issue-tracking
28.4.4 checks every statement in the request patch
https://github.com/manticoresoftware/manticoresearch product
VulnCheck Advisory: Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass third-party-advisory