Mahara

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 114
    Known Exploited: 0
    12
    Critical Level Threats
    20
    High Level Threats
    80
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-42163

    Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.

    Last Modified: Aug 18, 2026
    Published: Aug 17, 2026

    CVE-2026-42162

    Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.

    Last Modified: Aug 18, 2026
    Published: Aug 17, 2026

    CVE-2026-42164

    Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.

    Last Modified: Aug 18, 2026
    Published: Aug 17, 2026

    CVE-2025-61872

    Mahara XSS Vulnerability via Malicious Search Query in Elasticsearch7 Plugin

    Last Modified: Apr 28, 2026
    Published: Apr 24, 2026

    CVE-2025-59308

    Privilege Escalation via Masquerading in Multi‑Tenant Mahara

    Last Modified: Apr 28, 2026
    Published: Apr 24, 2026
    Items Per Page
    Mahara Vulnerabilities & Security CVEs | CVE-DB