CVE-2025-29992: Mahara

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.

Affected products

• Mahara Mahara: before 24.04.9 (fixed in 24.04.9)

Published 2025-08-26. Last modified 2026-06-17.