CVE-2026-42162

—

CVSS 3.1

9.1 critical

EPSS

<1%p28

Published

Aug 17, 2026 (29d ago)

Modified

Aug 31, 2026

Description

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.

Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.