PT-2026-21356 · Moodle+1 · Moodle+1

Aleksey Solovev · CVE-2026-26047 · Published 2026-02-21 · Updated 2026-04-20

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A denial-of-service issue exists in Moodle’s TeX formula editor. Insufficient execution time limits when rendering TeX content using mimetex could allow specially crafted formulas to consume excessive server resources. An authenticated user could exploit this to degrade performance or cause service interruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

BDU:2026-07358

BIT-MOODLE-2026-26047

CVE-2026-26047

GHSA-CG8J-5CR2-568Q

Affected Products

Moodle

Red Os

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26047.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-26047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26047 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07358 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26047 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2026-26047 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-26047 · Security Note
• https://osv.dev/vulnerability/GHSA-cg8j-5cr2-568q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26047 · Security Note
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c · Note
• https://t.me/CVEtracker/45348 · Telegram Post
• https://moodle.org/mod/forum/discuss.php?d=473316 · Note
• https://access.redhat.com/security/cve/CVE-2026-26047 · Note
• https://redos.red-soft.ru/search/?iblock_id=&q=CVE-2026-26047 · Note