Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-19 | 1 | General1 |
| 2026-03-02 | 1 | Patch1 |
A remote code execution vulnerability (CVE-2026-26045) affects `Moodle` via improper file restore validation. Update to version 5.1.2 or later to mitigate this risk. #Moodle #RCE #infosec https://www.pulsepatch.io/posts/cve-2026-26045-moodle-remote-code-execution
Post summary
The post announces a remote code execution vulnerability in Moodle (CVE-2026-26045) and recommends updating to version 5.1.2 or later to mitigate the risk.
今月は4件全てがSeverity/Risk: Seriousですね CVE-2026-26045 CVE-2026-26046 CVE-2026-26047 CVE-2024-51736 Security announcements | Moodle https://moodle.org/mod/forum/view.php?id=7128
Post summary
The post lists four CVEs as serious but provides no further details on exploitation, patches, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | moodle | moodle | - | - | - |