CVE-2026-26047

Source
https://cve.org/CVERecord?id=CVE-2026-26047
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-26047.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-26047
Aliases
Downstream
Published
2026-02-21T06:17:00.377Z
Modified
2026-03-02T09:41:15.740126Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events

Affected versions

v5.*
v5.0.0
v5.0.1
v5.0.2
v5.0.3
v5.0.4
v5.1.0
v5.1.0-beta
v5.1.0-rc1
v5.1.0-rc2
v5.1.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-26047.json"