Ilias-Elearning E.v. Ilias
6 CVEs affecting Ilias-Elearning E.v. Ilias. Latest disclosed: 2026-10-09. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80428 | Critical | 9.8 | 2026-08-26 | ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arb… |
CVE-2026-108113 | High | 8.8 | 2026-10-09 | ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows… |
CVE-2026-107639 | High | 8.8 | 2026-10-08 | ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors t… |
CVE-2026-82538 | High | 8.8 | 2026-09-04 | ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTT… |
CVE-2026-82877 | Medium | 6.5 | 2026-08-31 | ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read se… |
CVE-2026-86416 | Medium | 5.4 | 2026-09-07 | ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObj… |