IILIAS-eLearning e.V.

Products

Exploited and recent CVEs

• CVE-2026-110761 High 8.8 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import 0.6%
• CVE-2026-108113 High 8.8 ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import 0.6%
• CVE-2026-107639 High 8.8 ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename 0.7%
• CVE-2026-86416 Medium 5.4 ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods 0.4%
• CVE-2026-82538 High 8.8 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter 0.7%
• CVE-2026-82877 Medium 6.5 ILIAS Arbitrary File Read via SOAP addFile 0.5%
• CVE-2026-80428 Critical 9.8 ILIAS PHP Object Injection via Shibboleth Logout 4.7%