CRITICAL
9.8 CVE-2026-42164 Published 17 Aug 2026
Mahara Text Block Content Disclosure Vulnerability
Worried this affects one of your servers?
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality to an information disclosure flaw. A crafted call can recall the backed-up content from another Text section.
Affected versions:
- Mahara before 25.04.5
- Mahara 26.04.0
Reference: CVE-2026-42164 on NVD
← Back to Security News