Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Moodle Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2026-26045 - Vulnerability Database
Moodle

Moodle Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2026-26045

High
Reference: CVE-2026-26045
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-26045
Title: Moodle Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

A flaw was identified in Moodles backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.