CVE-2026-123655

7.5 HIGHpublic exploit available

Published 2026-11-06 · Updated 2026-11-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to view restricted materials, including content stored in the system context and files belonging to hidden or unavailable course modules. This issue results in unauthorized information disclosure of protected content.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-862

Public exploit & PoC references

https://github.com/moodle/moodle/commit/4b42ce4ed1d132214fd4b7d4b5f4f0387ec28a49

All references

https://access.redhat.com/security/cve/CVE-2026-123655
https://bugzilla.redhat.com/show_bug.cgi?id=2568053
https://github.com/moodle/moodle/commit/4b42ce4ed1d132214fd4b7d4b5f4f0387ec28a49
https://moodle.org/mod/forum/discuss.php?d=482830

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-11455
MEDIUMCVE-2025-12523PoC
MEDIUMCVE-2025-1397
MEDIUMCVE-2025-14484
MEDIUMCVE-2025-14486
MEDIUMCVE-2025-14487
MEDIUMCVE-2025-62819
MEDIUMCVE-2025-7043

Related by shared AI tags and CWE weakness class. Browse the full archive.