Known Vulnerabilities for products from Moodle
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Moodle".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123655 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-119556 json | Not Provided | 2026-10-30 | 2026-10-30 | |
| CVE-2026-119555 json | Not Provided | 2026-10-30 | 2026-11-05 | |
| CVE-2026-119554 json | Not Provided | 2026-10-30 | 2026-11-04 | |
| CVE-2026-119553 json | Not Provided | 2026-10-30 | 2026-10-30 | |
| CVE-2026-113683 json | Not Provided | 2026-10-20 | 2026-10-23 | |
| CVE-2026-113608 json | Not Provided | 2026-10-20 | 2026-10-21 | |
| CVE-2026-113607 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-102588 json | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102587 json | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An auth... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102586 json | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker t... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102585 json | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not ver... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102584 json | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculat... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102583 json | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image genera... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102582 json | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin w... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102580 json | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Bu... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102579 json | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102578 json | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized inp... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102577 json | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2025-62401 json | An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more... | Not Provided | 2025-10-23 | 2026-11-05 |
Known software with vulnerabilities from Moodle
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Moodle | Moodle | - |