What’s Vulnerable › Vulnerabilities

CVE-2026-82877: ILIAS Arbitrary File Read via SOAP addFile

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-31 · updated 2026-09-30
• Weakness: CWE-22

Description

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import directory and retrieve sensitive files including configuration files containing database credentials and setup passwords.

Affected products

• ILIAS-eLearning e.V. ILIAS: from 9.0 before 9.22; from 10.0 before 10.10; from 11.0 before 11.3 — fixed in 10.10, 11.3, 9.22

How to fix

Upgrade to a fixed version: ILIAS-eLearning e.V. ILIAS 10.10, 11.3, 9.22. Check the vendor advisory for mitigations.

References

• https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225630&ref_id=35
• https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225631&ref_id=35
• https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225632&ref_id=35
• https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=934
• https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=935
• https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=936
• https://schweigertit.de/en/advisories/SIT-2026-003.html
• https://www.vulncheck.com/advisories/ilias-arbitrary-file-read-via-soap-addfile

Get alerted when CVE-2026-82877 or the next vulnerability affects your stack