CVE-2026-102584 Moodle: missing capability check allows unauthorised grade penalty recalculation

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2026-102584

A flaw in Moodle allows a low-privileged authenticated user to bypass permission requirements due to a missing capability check . This vulnerability enables unauthorized users to trigger the recalculation of grade penalties , which can result in the modification of grade penalty records and the p...