All vulnerabilities

Servers and applications

CVE-2026-119554

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber

Severity
Medium 6.0
Published
30 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
MoodleServers and applications · cna:moodle project|moodle
  • Every version up to 4.5.15
  • From 5.0.0 up to 5.0.11
  • From 5.1.0 up to 5.1.8
  • From 5.2.0 up to 5.2.4
  • Version 5.3.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-119554