How I Found a CRITICAL 0DAY In MOODLE (Over 140.000 affected websites) CVE-2025-26529

In this video, I’ll take you through the process of how I uncovered a critical 0-day vulnerability in Moodle, one of the world’s most widely used learning management systems. By carefully debugging and chaining multiple bugs, I was able to escalate privileges and gain access to sensitive areas of the platform — all starting from a guest user account. This exploit impacts over 140,000 websites, and I’ll walk you through every step I took to discover and analyze the Bug

The environment used for debugging the source code: https://github.com/NightBloodz/moodleTestingEnv

Twitter/X: https://x.com/nightbloodz_
LinkedIn: https://www.linkedin.com/in/alvarobalada/
Blog: https://medium.com/@Nightbloodz
#cybersecurity #hacker #programming #vulnerability

Видео How I Found a CRITICAL 0DAY In MOODLE (Over 140.000 affected websites) CVE-2025-26529 канала Alvaro Balada