Vulnerability in Moodle (July 23, 2026)

unknown

A vulnerability has been discovered in Moodle. It allows an attacker to cause data confidentiality breaches.

CSIRTS triage

What: A vulnerability allows an attacker to cause data confidentiality breaches.
Who is affected: Deployments of Moodle are affected.
Urgency: Remediation is medium urgency as the vulnerability is not currently exploited.
Action: Update Moodle to the latest version to address this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Moodle

Get an email when a new Moodle advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-07-23
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0921/

Recent advisories for Moodle

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

mediumCVE-2026-65882: Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1 - The goto url…nvd · 2026-07-28
medium[NEW] [medium] Moodle: Vulnerability allows information disclosurecert-bund · 2026-07-28
high[NEW] [high] Microsoft Office 365 (Moodle Plugin): Vulnerability allows bypassing of security measurescert-bund · 2026-07-17
unknownCVE-2026-54733: The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Activ…nvd · 2026-07-16
unknownMultiple Vulnerabilities in Moodle (June 23, 2026)cert-fr-avis · 2026-06-23

Vulnerability in Moodle (July 23, 2026)

CSIRTS triage

Details

Recent advisories for Moodle

More from CERT-FR Avis de sécurité