VULNERABILITY INTELLIGENCE
CVE-2026-42163
CVSS score9.8 CRITICAL
EPSS probability0.48%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-08-31
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284