PT-2025-7782 · Alt Linux+1 · Alt Linux+1

Leon Stringer · Publicado 2025-02-18 · Atualizado 2025-11-27 · CVE-2025-26526

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue concerns permission checks in Feedback activities, where restrictions related to Separate Groups mode were not properly considered before allowing users to view or delete responses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Improper Access Control

Enumeração de Fraquezas

CWE-863

CWE-284

Identificadores relacionados

ALT-PU-2025-6924

ALT-PU-2025-7344

BDU:2025-02324

BIT-MOODLE-2025-26526

CVE-2025-26526

GHSA-PXG4-XJP7-W9C5

Produtos afetados

Alt Linux

Red Os

Referências · 17

• https://github.com/moodle/moodle · Nota
• https://cve.org/CVERecord?id=CVE-2025-26526 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-26526 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-26526 · Aviso do Fabricante
• https://moodle.org/mod/forum/discuss.php?d=466142 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-26526 · Nota de Segurança
• https://cybersecurity-help.cz/vulnerabilities/104029 · Nota
• https://twitter.com/CVEnew/status/1894113159457509746 · Publicação no Twitter
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Aviso do Fabricante
• https://t.me/cvedetector/18823 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-02324 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-pxg4-xjp7-w9c5 · Aviso do Fabricante
• https://t.me/cveNotify/131500 · Publicação no Telegram
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976 · Correção
• https://ubuntu.com/security/CVE-2025-26526 · Aviso do Fabricante