CVE Catalog
CVE-2026-42162
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.
Risk Assessment
Manipulating the file path could lead to unauthorized access to artefacts, compromising user data confidentiality.
Recommendation
It is recommended to update Mahara to version 25.04.5 or later (or 26.04.0) to prevent unauthorized access.
Original NVD description (English source)
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.