What’s Vulnerable › Products

ILIAS-eLearning e.V. ILIAS vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ILIAS-eLearning e.V. ILIAS version is affected

Latest ILIAS-eLearning e.V. ILIAS vulnerabilities

• CVE-2026-110761 — ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import (CVSS 8.8)
• CVE-2026-108113 — ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import (CVSS 8.8)
• CVE-2026-107639 — ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename (CVSS 8.8)
• CVE-2026-86416 — ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods (CVSS 5.4)
• CVE-2026-82538 — ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter (CVSS 8.8)
• CVE-2026-82877 — ILIAS Arbitrary File Read via SOAP addFile (CVSS 6.5)
• CVE-2026-80428 — ILIAS PHP Object Injection via Shibboleth Logout (CVSS 9.8)