https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:15:07.776169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2025-67851 BIT-moodle-2025-67851 — Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export 2026-10-06T10:15:07.849210+00:00

Affected: Bitnami: moodle

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T10:15:07.849270+00:00 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-267176 EUVD-2026-267176 2026-10-06T10:15:07.849291+00:00 EUVD-2026-267176 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67851 fkie_cve-2025-67851 2026-10-06T10:15:07.849304+00:00

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.

 https://cve.radiocsirt.org/vuln/ghsa-qfh6-h7j6-fvjv GHSA-qfh6-h7j6-fvjv — Moodle formula injection vulnerability 2026-10-06T10:15:07.849328+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67851 UBUNTU-CVE-2025-67851 2026-10-06T10:15:07.849353+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 WID-SEC-W-2025-2851 — Moodle: Mehrere Schwachstellen 2026-10-06T10:15:07.849374+00:00

Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.