Read the docs
TI-2026-10931 Aliases CVE-2026-12789GHSA-69g6-pggc-389p

ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection

Priority MEDIUM 56CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. This issue was independently identified and fixed internally by the vendor's own security team ahead of this report.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00332 26th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ILIASLearning Management System11.0—No fix listedCNA
  • Learning Management System VendorILIAS Affected 11.0 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:ilias:learning_management_system:*:*:*:*:*:*:*:*——ILIAS
  • cpe:2.3:a:ilias:learning_management_system:*:*:*:*:*:*:*:* Versions — — ·ILIAS

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-12789
  2. 2026-10-03 Alias added: GHSA-69g6-pggc-389p

References

—

  • TI-2023-24624 ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating… CVSS 3.1CRITICAL 9.0
  • TI-2022-22699 ILIAS before 7.16 allows OS Command Injection. CVSS 3.1HIGH 8.8
  • TI-2024-22118 ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote… CVSS 3.1HIGH 7.2
  • TI-2024-22115 A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title… CVSS 3.1HIGH 7.1
  • TI-2023-24622 ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file… CVSS 3.1MEDIUM 6.5
  • TI-2022-22701 ILIAS before 7.16 has an Open Redirect. CVSS 3.1MEDIUM 6.1
See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences