{"id":"CVE-2026-102582","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-102582","generatedAt":"2026-10-28T01:02:50.648Z","title":"The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL.","description":"A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments even after an administrator disabled the feature in the user interface.","published":"2026-09-30T09:17:15.000Z","lastModified":"2026-10-01T15:18:01.000Z","status":"Analyzed","sourceIdentifier":"patrick@puiterwijk.org","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-425"],"affected":["moodle/moodle"],"epss":{"score":0.00196,"percentile":0.09178,"date":"2026-10-26","history":[{"date":"2026-09-30","score":0.00204,"percentile":0.0938}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"scored","label":"Newly scored","at":"2026-10-01T17:15:05.000Z","detail":{"from":"2.2","score":"4.3","severity":"MEDIUM","fromSeverity":"LOW"},"summary":"Now scored CVSS 4.3 MEDIUM (was 2.2)."},{"kind":"new","label":"New CVE","at":"2026-09-30T09:17:15.000Z","detail":{"score":"2.2","severity":"LOW","publishedAt":"2026-09-30T09:17:15.350Z"},"summary":"New CVE, medium severity (CVSS 4.3)."}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88593","tags":["Patch"],"source":"patrick@puiterwijk.org"},{"url":"https://access.redhat.com/security/cve/CVE-2026-102582","tags":["Third Party Advisory"],"source":"patrick@puiterwijk.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543636","tags":["Issue Tracking","Third Party Advisory"],"source":"patrick@puiterwijk.org"},{"url":"https://moodle.org/mod/forum/discuss.php?d=482500","tags":["Vendor Advisory"],"source":"patrick@puiterwijk.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-102582","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}