CVE-2026-54733

🗓️ 16 Jul 2026 14:52:03Reported by GitHub_MType

Authentication bypass in Moodle Teams SSO due to unverified JWT signature allowing token forging.

Reporter	Title	Published	Views	Family All 7
attackerkb	CVE-2026-54733	16 Jul 202614:52	–	attackerkb
circl	CVE-2026-54733	16 Jul 202616:15	–	circl
cvelist	CVE-2026-54733 moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint	16 Jul 202614:52	–	cvelist
euvd	EUVD-2026-44938	16 Jul 202614:52	–	euvd
nvd	CVE-2026-54733	16 Jul 202616:19	–	nvd
ptsecurity	PT-2026-60486	16 Jul 202600:00	–	ptsecurity
vulnrichment	CVE-2026-54733 moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint	16 Jul 202614:52	–	vulnrichment

Vulners

Node

microsoft o365-moodleRange<4.5.6

microsoft o365-moodleRange5.0.0–5.0.5

microsoft o365-moodleRange5.1.0–5.1.1

[
  {
    "vendor": "microsoft",
    "product": "o365-moodle",
    "versions": [
      {
        "version": "< 4.5.6",
        "status": "affected"
      },
      {
        "version": ">= 5.0.0, < 5.0.5",
        "status": "affected"
      },
      {
        "version": ">= 5.1.0, < 5.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/microsoft/o365-moodle/releases/tag/v20260423_m405
github	www.github.com/microsoft/o365-moodle/commit/258872f6e2011f4efa8ebb77d2898142a9435e89
github	www.github.com/microsoft/o365-moodle/commit/d5596655f0baaee0f11aec2e10d6f36b0bd29220
github	www.github.com/microsoft/o365-moodle/commit/01b2d4c2e13b06a66557527084cbf9bace655944
github	www.github.com/microsoft/o365-moodle/releases/tag/v20260423_m500
github	www.github.com/microsoft/o365-moodle/releases/tag/v20260423_m501
github	www.github.com/microsoft/o365-moodle/security/advisories/GHSA-hqjh-93qv-47v5

16 Jul 2026 17:46Current

6.1Medium risk

Vulners AI Score6.1

CVSS 49.3

SSVC

CWE-347