PT-2026-21356 · Moodle+1 · Moodle+1

Aleksey Solovev · Published 2026-02-21 · Updated 2026-04-20 · CVE-2026-26047

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A denial-of-service issue exists in Moodle’s TeX formula editor. Insufficient execution time limits when rendering TeX content using mimetex could allow specially crafted formulas to consume excessive server resources. An authenticated user could exploit this to degrade performance or cause service interruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

BDU:2026-07358

BIT-MOODLE-2026-26047

CVE-2026-26047

GHSA-CG8J-5CR2-568Q

Affected Products

Moodle

Red Os

References · 20

• https://osv.dev/vulnerability/CVE-2026-26047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26047 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2026-26047 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-26047 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-26047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26047 · Security Note
• https://osv.dev/vulnerability/GHSA-cg8j-5cr2-568q · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07358 · Security Note
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c · Note
• https://moodle.org/mod/forum/discuss.php?d=473316 · Note
• https://access.redhat.com/security/cve/CVE-2026-26047 · Note
• https://twitter.com/CVEnew/status/2025154184337641891 · Twitter Post
• https://t.me/CVEtracker/45348 · Telegram Post
• https://redos.red-soft.ru/search/?iblock_id=&q=CVE-2026-26047 · Note