{"id":"CVE-2026-102578","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-102578","summary":"A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured…","details":"A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an attacker to view, alter, or delete sensitive data stored in the underlying database.","published":"2026-09-30T09:17:14.810","modified":"2026-10-01T14:38:42.597","cvss":{"score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"FIX","url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-89383"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-102578"},{"type":"ADVISORY","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543632"},{"type":"ADVISORY","url":"https://moodle.org/mod/forum/discuss.php?d=482496"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-10-01T14:38:42.597"}}