Product by Ilias-elearning E.v.

    Ilias

    7 known vulnerabilities in Ilias (Ilias-elearning E.v.), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ilias (Ilias-elearning E.v.)
    CriticalCVE-2026-80428

    ILIAS PHP Object Injection via Shibboleth Logout

    		9.8
    HighCVE-2026-107639

    ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename

    also in 1 other product

    		8.8
    HighCVE-2026-108113

    ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

    		8.8
    HighCVE-2026-110761

    ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import

    also in 1 other product

    		8.8
    HighCVE-2026-82538

    ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

    		8.8
    HighCVE-2026-82877

    ILIAS Arbitrary File Read via SOAP addFile

    		6.5
    MediumCVE-2026-86416

    ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods

    also in 1 other product

    		5.4

    All products by Ilias-elearning E.v.