CVE-2026-108113highCWE-434

CVE-2026-108113: high-severity vulnerability in ILIAS-eLearning e.V. ILIAS

ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.6%
exploitation probability
0.6%top 50% of all CVEs
observed exploitation
nono source reports it
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htaccess and PHP file to the web-served image directory, achieving remote code execution as the web server user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
ILIAS-eLearning e.V. · ILIAS
Related CVEs — ILIAS-eLearning e.V. ILIAS

In the same product, most dangerous first.

CVE-2026-80428CRITICALILIAS PHP Object Injection via Shibboleth LogoutEPSS 4.7%CVE-2026-107639HIGHILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload FilenameEPSS 0.7%CVE-2026-82538HIGHILIAS Arbitrary SQL Injection via Repository Trash Table Sort ParameterEPSS 0.7%CVE-2026-110761HIGHILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results ImportEPSS 0.6%CVE-2026-82877HIGHILIAS Arbitrary File Read via SOAP addFileEPSS 0.5%CVE-2026-86416MEDIUMILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action MethodsEPSS 0.4%
References
https://docu.ilias.de/go/blog/15821/950https://docu.ilias.de/go/blog/15821/951https://docu.ilias.de/go/blog/15821/952https://github.com/ILIAS-eLearning/ILIAShttps://github.com/ILIAS-eLearning/ILIAS/blob/v10.11/components/ILIAS/QTI/classes/class.ilQtiMatImageSecurity.php#L110-L122https://github.com/ILIAS-eLearning/ILIAS/commit/47c8462bf46bbebd543a9f3b39c7896b0e9e7362https://github.com/ILIAS-eLearning/ILIAS/commit/58ee5b1767212530f9948adb0e7d5aecec66ce60https://github.com/ILIAS-eLearning/ILIAS/commit/5b200351330bee698432a45c0877c5bc694c367ahttps://www.vulncheck.com/advisories/ilias-before-9.24-10.12-and-11.5-unrestricted-file-upload-via-qti-import