Skip to content
OpenAdvisories

Vendor

ILIAS-eLearning e.V.

7 known vulnerabilities.

Products

ILIAS 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-86416

    ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods

    ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without write permission checks. Authenticated users with on…

    ILIAS-eLearning e.V. ILIAS
  • Medium 6.5
    CVE-2026-82877

    ILIAS Arbitrary File Read via SOAP addFile

    ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file pa…

    ILIAS-eLearning e.V. ILIAS