Vulnerability · Published Jun 21, 2026 · Assigned by VulDB

CVE-2026-12789ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection

Medium 4.7

In plain English

A medium-severity SQL injection in Learning Management System from ILIAS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)0.3%top 73.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. This issue was independently identified and fixed internally by the vendor's own security team ahead of this report.

Affected products (as reported)

Vendor	Product	Versions
ILIAS	Learning Management System	11.0

Weakness: CWE-89, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-372531 | ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection vdb-entry, technical-description
VDB-372531 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-12789 | CVE Analysis and Report third-party-advisory
Submit #836104 | ILIAS ILIAS-eLearning 11.0 SQL Injection third-party-advisory