https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:30:30.959198+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2025-67848 BIT-moodle-2025-67848 — Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access. 2026-10-06T03:30:31.041575+00:00

Affected: Bitnami: moodle

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T03:30:31.041653+00:00 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-271048 EUVD-2026-271048 2026-10-06T03:30:31.041688+00:00 EUVD-2026-271048 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67848 fkie_cve-2025-67848 2026-10-06T03:30:31.041711+00:00

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.

 https://cve.radiocsirt.org/vuln/ghsa-j5jv-w5cw-j9ff GHSA-j5jv-w5cw-j9ff — Moodle authentication bypass vulnerability 2026-10-06T03:30:31.041751+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67848 UBUNTU-CVE-2025-67848 2026-10-06T03:30:31.041794+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 WID-SEC-W-2025-2851 — Moodle: Mehrere Schwachstellen 2026-10-06T03:30:31.041832+00:00

Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.