CVE-2025-26529Exploit(moodle / moodle)

LOWCVSS 6.1 · MEDIUM

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Prioritize remediation for moodle moodle systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.

moodle CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Patch / fix

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145

Vendor / third-party advisories

https://moodle.org/mod/forum/discuss.php?d=466145

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

moodle

Threat summary

Public PoC and exploit tooling are both present
3 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 2 signals
PoC mentioned or linked in 2 signals
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-07-15)
3 total mentions across 2 days

Affected systems

Vendors

moodle

Products

moodle

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

Exploit

133.3%

Disclosure

133.3%

PoC

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-14	1	Exploit1
2026-07-15	2	Disclosure1PoC1

Full discourse3 posts

Dark Web Informer@DarkWebInformer91d
Exploit
‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub: https://github.com/Astroo18/PoC-CVE-2025-26529 https://t.co/IlbpoNfp9S
Post summary
A proof‑of‑concept repository for CVE-2025-26529 reveals a Moodle XSS that escalates to Remote Code Execution; no evidence of widespread exploitation or patching is reported.
177047931441.3K
234.5K followersView on X
Brut 🇮🇳@wtf_yodhha91d
Disclosure
‼️ CVE-2025-26529: Moodle XSS to RCE Exploit ✅ Join Telegram : http://t.me/brutsecurity #CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity https://t.co/5BttMRIB62
Post summary
The tweet announces the discovery of CVE-2025-26529, a Moodle vulnerability converting XSS into an RCE, but offers no further technical, exploit, or remediation details.
21019131.9K
7.5K followersView on X
Brut 🇮🇳@wtf_yodhha91d
PoC
https://github.com/Astroo18/PoC-CVE-2025-26529
Post summary
The provided link directs to a GitHub repository that offers a Proof of Concept (PoC) showcasing exploitation of CVE‑2025‑26529.
00012122
7.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	moodle	moodle	-	-	-

Explore more

Back to dashboard moodle CVEs moodle vulnerabilities