https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T00:03:58.682596+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00591 bdu:2016-00591 2026-10-28T00:03:58.687250+00:00 bdu:2016-00591 https://cve.radiocsirt.org/vuln/certfr-2015-avi-403 certfr-2015-avi-403 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-28T00:03:58.687285+00:00 certfr-2015-avi-403 https://cve.radiocsirt.org/vuln/cnvd-2015-07086 cnvd-2015-07086 2026-10-28T00:03:58.687304+00:00 cnvd-2015-07086 https://cve.radiocsirt.org/vuln/euvd-2026-93286 EUVD-2026-93286 2026-10-28T00:03:58.687317+00:00 EUVD-2026-93286 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5266 fkie_cve-2015-5266 2026-10-28T00:03:58.687328+00:00

The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script.

 https://cve.radiocsirt.org/vuln/ghsa-454r-4cjv-vc9h GHSA-454r-4cjv-vc9h — Moodle allows attackers to obtain manager privileges 2026-10-28T00:03:58.687353+00:00

Affected: Packagist: moodle/moodle

The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script.

 https://cve.radiocsirt.org/vuln/gsd-2015-5266 gsd-2015-5266 2026-10-28T00:03:58.687376+00:00 gsd-2015-5266 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5266 Withdrawn: UBUNTU-CVE-2015-5266 2026-10-28T00:03:58.687386+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script.