CVE-2025-26526
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Feb 24, 2025
CWE ID 863
Summary
CVE-2025-26526 is a vulnerability that affects Feedback activities in certain systems. The issue arises when Separate Groups mode restrictions are not considered during permission checks, allowing unintended users to view or delete responses. This oversight could potentially lead to data exposure or loss, underscoring the importance of thorough access control measures.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Moodle
Affected Vendors
- Moodle