Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: ILIAS-eLearning e.V. ILIAS — ILIAS 11.5 Security Advisory (Mantis 0048413) Clear all filters
TI-2026-74420 CVE-2026-110761

PHP object injection in ILIAS test results import

Priority MEDIUM 40

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0057 Published 2026-10-14 Fixed in 9.24, 10.12 +1 CWE-502
TI-2026-70090 CVE-2026-108113

Unrestricted file upload in ILIAS QTI import lets authors run code

Priority MEDIUM 41

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0064 Published 2026-10-09 Fixed in 9.24, 10.12 +1 CWE-434
TI-2026-69589 CVE-2026-107639 · GHSA-xh43-6gc2-xccj

Argument injection in ILIAS image map uploads enables code execution

Priority MEDIUM 41

ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filen…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00678 Published 2026-10-08 Fixed in 9.24, 10.12 +1 CWE-88