CVE-2026-42162CWE-22path-traversal

CVE-2026-42162

Critical · published August 18, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-18T03:16Z
References (2)
https://mahara.org · [email protected]https://mahara.org/interaction/forum/topic.php?id=10057 · [email protected]
EPSS history
Timeline
  • 17 AUG 00:00Z
    Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page…
    cvelistv5