https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:30:37.981328+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10235 bdu:2025-10235 2026-10-08T10:30:37.985282+00:00 bdu:2025-10235 https://cve.radiocsirt.org/vuln/bit-moodle-2025-53021 BIT-moodle-2025-53021 2026-10-08T10:30:37.985314+00:00

Affected: Bitnami: moodle

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the attacker's. Successful exploitation results in full account takeover. According to the Moodle Releases page, "Bug fixes for security issues in 3.11.x ended 11 December 2023." NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/euvd-2026-245784 EUVD-2026-245784 2026-10-08T10:30:37.985349+00:00 EUVD-2026-245784 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53021 fkie_cve-2025-53021 2026-10-08T10:30:37.985363+00:00

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the attacker's. Successful exploitation results in full account takeover. According to the Moodle Releases page, "Bug fixes for security issues in 3.11.x ended 11 December 2023." NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ghsa-cgvv-3455-824j GHSA-cgvv-3455-824j — Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter 2026-10-08T10:30:37.985387+00:00

Affected: Packagist: moodle/moodle

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the attacker's. Successful exploitation results in full account takeover. According to the Moodle Releases page, "Bug fixes for security issues in 3.11.x ended 11 December 2023." NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53021 UBUNTU-CVE-2025-53021 2026-10-08T10:30:37.985410+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the attacker's. Successful exploitation results in full account takeover. According to the Moodle Releases page, "Bug fixes for security issues in 3.11.x ended 11 December 2023." NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1391 WID-SEC-W-2025-1391 — Moodle: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-08T10:30:37.985432+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen.