{"id":"CVE-2026-26046","aliases":["BIT-moodle-2026-26046","EUVD-2026-7389","GHSA-4g4j-v56v-2w79","UBUNTU-CVE-2026-26046"],"status":"published","title":"Moodle: moodle: improper input sanitization in tex filter administration setting","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.13829,"percentile":0.96572,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2026-02-21T05:40:08Z","modified":"2026-10-28T02:31:12Z","fixes":[{"ecosystem":"Bitnami","package":"moodle","fixed_in":["4.5.9","5.0.5","5.1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"moodle","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.5.9"},{"introduced":"5.0.0"},{"fixed":"5.0.5"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.9+dfsg-1","2.7.10+dfsg-1","2.7.11+dfsg-1","2.7.11+dfsg-2","2.7.12+dfsg-1","3.0.3+dfsg-0ubuntu1","3.0.3+dfsg-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.3+dfsg-0ubuntu1","3.0.3+dfsg-0ubuntu1+esm1"]}],"products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-26046","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440903","tags":["issue-tracking","x_refsource_REDHAT","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26046","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4g4j-v56v-2w79"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26046.json","tags":["advisory"]},{"url":"https://github.com/moodle/moodle","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-26046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-26046","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-26046","title":"Moodle: moodle: improper input sanitization in tex filter administration setting","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T05:40:08.388Z","modified":"2026-02-26T14:44:11.847Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:38:20.971157Z"}],"euvd":[{"id":"EUVD-2026-7389","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T05:40:08Z","modified":"2026-02-26T14:44:11Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:28.012266Z"}],"ghsa":[{"id":"GHSA-4g4j-v56v-2w79","title":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient...","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T06:30:16Z","modified":"2026-02-21T06:30:23Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:06:18.587191Z"}],"nvd":[{"id":"CVE-2026-26046","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T06:17:00.203Z","modified":"2026-06-17T10:25:38.547Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:06.63895Z"}],"osv":[{"id":"CVE-2026-26046","title":"Moodle: moodle: improper input sanitization in tex filter administration setting","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T05:40:08.388Z","modified":"2026-10-28T02:31:12.477276761Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:44:59.80315Z"},{"id":"UBUNTU-CVE-2026-26046","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-02-21T06:17:00Z","modified":"2026-09-23T18:46:20.072952381Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"BIT-moodle-2026-26046","title":"Moodle: moodle: improper input sanitization in tex filter administration setting","description":"A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.","status":"published","published":"2026-03-02T08:50:25.461Z","modified":"2026-09-08T08:48:15.594616278Z","updated_at":"2026-11-02T15:28:33.469426Z"}]}}