Medium severity4.3NVD Advisory· Published Sep 30, 2026

CVE-2026-102584

Description

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moodle/Moodleinferred2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2026-102584nvd
bugzilla.redhat.com/show_bug.cginvd
moodle.org/mod/forum/discuss.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000