Ilias — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Ilias, with AI-generated Chinese analysis, references, and POCs.

Vendor: Ilias

CVE ID	Title	CVSS	Severity	Published
CVE-2026-110761	ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import CWE-502	8.8	High	2026-10-14
CVE-2026-108113	ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import CWE-434	8.8	High	2026-10-09
CVE-2026-107639	ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename CWE-88	8.8	High	2026-10-08
CVE-2023-32778	ILIAS 路径遍历漏洞 CWE-23	3.3	Low	2026-09-14
CVE-2026-86416	ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods CWE-862	5.4	Medium	2026-09-07
CVE-2026-82538	ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter CWE-89	8.8	High	2026-09-04
CVE-2026-85135	ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload CWE-434	6.3	Medium	2026-09-03
CVE-2026-82877	ILIAS Arbitrary File Read via SOAP addFile CWE-22	6.5	Medium	2026-08-31
CVE-2026-80428	ILIAS PHP Object Injection via Shibboleth Logout CWE-502	9.8	Critical	2026-08-26
CVE-2025-11346	ILIAS Base64 Decoding unserialize deserialization CWE-502	6.3	Medium	2025-10-06
CVE-2025-11345	ILIAS Test Import unserialize deserialization CWE-502	5.5	Medium	2025-10-06
CVE-2025-11344	ILIAS Certificate Import code injection CWE-94	6.3	Medium	2025-10-06
CVE-2019-1010237	Ilias 跨站脚本漏洞 CWE-79	6.1	-	2019-07-22

All 13 known CVE vulnerabilities affecting Ilias with full Chinese analysis, references, and POCs where available.