CVE Catalog
CVE-2026-42164
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.
Risk Assessment
The vulnerability could allow unauthorized access to other users' content, compromising data confidentiality in the Mahara system.
Recommendation
It is recommended to update Mahara to version 25.04.5 or later (or 26.04.0) to mitigate the vulnerability.
Original NVD description (English source)
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.