IE
Vendor security profile
ILIAS-eLearning e.V.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit1
Patch rate%100
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
2
2
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High4 (67%)
Medium1 (17%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%17
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.7
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
IE
Patch verifiedEPSS %1
8.7
CVE-2026-107639
ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
IE
Patch verifiedEPSS %1
5.3
CVE-2026-86416
ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods
IE
Patch verifiedEPSS %0
8.7
CVE-2026-82538
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
IE
Patch verifiedEPSS %1
7.1
CVE-2026-82877
ILIAS Arbitrary File Read via SOAP addFile
IE
Patch verifiedEPSS %1
9.3
CVE-2026-80428
ILIAS PHP Object Injection via Shibboleth Logout
IE
Patch verifiedEPSS %5