CVE-2026-26045

HIGH

7.2

Description

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.

Details CVE

Score CVSS v3.17.2

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie2/21/2026

Derniere modification2/26/2026

Sourcenvd

Observations honeypot0

Produits affectes

moodle:moodle

Faiblesses (CWE)

CWE-94

References

https://access.redhat.com/security/cve/CVE-2026-26045(patrick@puiterwijk.org)

https://bugzilla.redhat.com/show_bug.cgi?id=2440901(patrick@puiterwijk.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.