CRITICAL 9.8 CVE-2026-42163 Published 17 Aug 2026

Mahara LTI Authentication Bypass Vulnerability

Worried this affects one of your servers?

Get Emergency Help help@myserverhacked.com

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances.

This applies to:

LTI 1.1
LTI 1.3 Advantage

Reference: CVE-2026-42163 on NVD

← Back to Security News