CVE-2026-102582

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A flaw exists where the manual enrolment management page fails to verify if the manual enrolment plugin is disabled. This allows users with enrolment permissions to bypass the user interface restriction and access the management page directly via its URL, enabling them to manage manual enrolments despite the feature being disabled by an administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.