PT-2026-76869

CVE-2026-42164

·

Published

2026-08-17

·

Updated

2026-08-31

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0
Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section, leading to information disclosure.
Recommendations Update to version 25.04.5 or later. Update to version 26.04.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2026-42164
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com