CVE-2026-42164: Mahara Mahara vulnerability
Published Aug 17, 2026
·Updated
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.
Affected Software
1 affected component
Mahara Mahara>0<=25.04.5, >=25.04.5<26.04.0
Event History
Aug 17, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-42164?
CVE-2026-42164 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2026-42164?
To fix CVE-2026-42164, upgrade to Mahara version 25.04.5 or 26.04.0 or later.
3
What systems are affected by CVE-2026-42164?
CVE-2026-42164 affects Mahara versions prior to 25.04.5 and 26.04.0.
4
What type of vulnerability is CVE-2026-42164?
CVE-2026-42164 is a vulnerability that allows recall of backed-up content from other Text sections.
5
When was CVE-2026-42164 published?
CVE-2026-42164 was published on August 17, 2026.