CVE-2026-30849.ts — usage

This TypeScript script performs a check and an exploit for MantisBT via SOAP.

Prerequisites

• Node.js installed
• Dependencies installed:

npm install

Command

ts-node CVE-2026-30849.ts check --url <url>
ts-node CVE-2026-30849.ts exploit --url <url>

npx ts-node .\CVE-2026-30849.ts check --url http://mantis.local
npx ts-node .\CVE-2026-30849.ts exploit --url http://mantis.local

Expected result

The script prints the detected version and compares it to the patched version 2.28.1:

• version < 2.28.1 -> VULNERABLE
• version >= 2.28.1 -> NOT VULNERABLE

If the version cannot be retrieved (endpoint unavailable, SOAP/curl error), the script exits with an error status.