Is CVE-2026-102584 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102584?

CVE-2026-102584 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-102584

Description

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.