Skip to content
OpenAdvisories
High WID-SEC-2026-2774 2 CVEs

ILIAS: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Aug 26, 2026 · Revision 2 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in ILIAS ausnutzen, um beliebigen Code auszuführen, SQL-Injection durchzuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand herbeizuführen.

Product

ILIAS ist eine Open Source e-Learning Lösung.

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-80428 Public exploit

    ILIAS PHP Object Injection via Shibboleth Logout

    ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting serialized objects through the LTI authentication endpoint and triggering d…

    ILIAS-eLearning e.V. ILIAS
  • Unscored —
    CVE-2026-18745 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Revision history

  1. #2

    CVE-2026-80428 ergänzt

  2. #1

    Initiale Fassung

References

  • ILIAS Security-Blog vom 2026-08-11
    https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=x7%3Alg%3A5r&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=936
  • ILIAS Security-Blog vom 2026-08-11
    https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=x7%3Alg%3A5r&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=935
  • ILIAS Security-Blog vom 2026-08-11
    https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=x7%3Alg%3A5r&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=934