CVE-2026-92796

Manticore Search versions 27.0.0 through 28.4.3 fail to validate permissions for all statements within multi-statement SQL requests. An authenticated read-only user can append additional SELECT statements after the first statement to read credential tables and obtain password hashes , allowing au...