CVE-2025-11344: ILIAS Certificate Import code injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-06 · updated 2026-10-19
Weakness: CWE-74

Description

A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component.

Affected products

ILIAS: 8.23, 9.13, 10.1

References

https://docu.ilias.de/go/blog/15821/882
https://vuldb.com/?ctiid.327229
https://vuldb.com/?id.327229
https://vuldb.com/?submit.664889
https://srlabs.de/blog/breaking-ilias-part-2-three-to-rce

Get alerted when CVE-2025-11344 or the next vulnerability affects your stack