CVE-2026-26045

HIGH

7.2

Descricao

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.

Detalhes CVE

Pontuacao CVSS v3.17.2

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosHIGH

Interacao do usuarioNONE

Publicado2/21/2026

Ultima modificacao2/26/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

moodle:moodle

Fraquezas (CWE)

CWE-94

Referencias

https://access.redhat.com/security/cve/CVE-2026-26045(patrick@puiterwijk.org)

https://bugzilla.redhat.com/show_bug.cgi?id=2440901(patrick@puiterwijk.org)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.