CVE-2026-108113: ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

ILIAS

https://github.com/ILIAS-eLearning/ILIAS

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "ILIAS-eLearning e.V.",
                    "product": "ILIAS",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "5.2.8",
                            "lessThan": "9.24",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "10.0",
                            "lessThan": "10.12",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "11.0",
                            "lessThan": "11.5",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ],
                    "packageURL": "pkg:github/ILIAS-eLearning/ILIAS",
                    "collectionURL": "https://github.com/ILIAS-eLearning/ILIAS",
                    "repo": "https://github.com/ILIAS-eLearning/ILIAS"
                }

cve-program · CVE-2026-108113

ILIAS