CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-18025

mediumcovered by 1 sourcefirst seen 2026-07-28
An attacker can exploit a vulnerability in Moodle to disclose information.

CSIRTS triage

vendor: Moodleproduct: MoodleInformation disclosure
What
A vulnerability in Moodle allows an attacker to disclose information.
Who is affected
Users of Moodle are affected by this vulnerability.
Urgency
Remediation is medium urgency as the vulnerability could lead to information exposure.
Action
Update to the latest version of Moodle to mitigate this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-18025

Get an email if CVE-2026-18025 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

External references

NVD record for CVE-2026-18025

CVE.org record

Embed the live status

CVE-2026-18025 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-18025 status](https://www.csirts.com/badge/CVE-2026-18025)](https://www.csirts.com/cve/CVE-2026-18025)