CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

Multiple Vulnerabilities in Moodle (June 23, 2026)

unknown
Multiple vulnerabilities have been discovered in Moodle. Some of them allow an attacker to cause a remote denial of service, server-side request forgery (SSRF), and indirect remote code injection (XSS).

CSIRTS triage

vendor: Moodleproduct: MoodleDenial of serviceServer-side request forgeryCross-site scripting
What
Multiple vulnerabilities allow an attacker to cause a remote denial of service, server-side request forgery (SSRF), and indirect remote code injection (XSS).
Who is affected
Deployments of Moodle are affected.
Urgency
Remediation is urgent due to the potential for remote denial of service and code injection.
Action
Users should apply the necessary updates as soon as they are available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Moodle

Get an email when a new Moodle advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-FR Avis de sécurité (FR · national-cert · site)
Severity
unknown
Published
2026-06-23
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0794/

More from CERT-FR Avis de sécurité