Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-42164: Mahara Text Block Vulnerability: Unintended Content Recall
CVE-2026-42164 · published 17 days ago
Summary
Older versions of Mahara allow an attacker to access content from another user's Text block by crafting a specific request. This could potentially allow an attacker to view sensitive information. To fix this, update to version 25.04.5 or 26.04.1.
Original advisory text
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text sect...
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.
Severity
9.8
Critical
Exploitation
EPSS <1%
Type
CWE-200Information Exposure
Timeline
Published17 Aug 2026
Updated2 Sep 2026
First seen17 Aug 2026
Monitor software like this
Free during beta