Skip to content
OpenAdvisories
High WID-SEC-2026-0447 4 CVEs

Moodle: Mehrere Schwachstellen

Published Feb 17, 2026 · Updated Feb 17, 2026 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Angriff durchzuführen.

Product

Moodle ist ein Software-Paket, um internetbasierte Kurse zu entwickeln und durchzuführen. Es ist ein globales Softwareentwicklungsprojekt, das einen konstruktivistischen Lehr- und Lernansatz unterstützt.

Vulnerabilities 4

  • High 7.2
    CVE-2026-26045

    Moodle: moodle: improper validation in file restore functionality leading to remote code execution

    A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 7.2
    CVE-2026-26046 EPSS 14%

    Moodle: moodle: improper input sanitization in tex filter administration setting

    A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting …

    moodle Web / CMS Ubuntu
  • Medium 6.5
    CVE-2026-26047

    Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service

    A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user c…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • None 0.0
    CVE-2024-51736

    Command execution hijack on Windows with Process class in symfony/process

    Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named `cmd.exe` is located in the current working directory it will be called by the `Process` class when preparing comma…

    symfony symfony symfony/symfony symfony/process Packagist

Revision history

  1. #1

    Initiale Fassung

References