What is CVE-2026-102579?

CVE-2026-102579 is a medium-severity vulnerability, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 4.3/10. Published 2026-09-30.

How severe is CVE-2026-102579?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CVE-2026-102579

CVE-2026-102579

A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue leads to unauthorized information disclosure.

Published 2026-09-30 · last modified 2026-09-30.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Weakness classification (CWE)

CWE-359 — Exposure of Private Personal Information to an Unauthorized Actor

References

git.moodle.org/gw
access.redhat.com/security/cve/CVE-2026-102579 (vdb-entry)
bugzilla.redhat.com/show_bug.cgi (issue-tracking)
moodle.org/mod/forum/discuss.php

Frequently asked questions

What is CVE-2026-102579?: CVE-2026-102579 is a medium-severity vulnerability, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 4.3/10. Published 2026-09-30.
How severe is CVE-2026-102579?: Medium severity. CVSS v3 base score is 4.3 out of 10.