CVE-2026-108113Published
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108113 · Microsoft / collected KEV context
cve-program · CVE-2026-108113
- https://docu.ilias.de/go/blog/15821/952
- https://docu.ilias.de/go/blog/15821/951
- https://docu.ilias.de/go/blog/15821/950
- https://github.com/ILIAS-eLearning/ILIAS/commit/58ee5b1767212530f9948adb0e7d5aecec66ce60
- https://github.com/ILIAS-eLearning/ILIAS/commit/5b200351330bee698432a45c0877c5bc694c367a
- https://github.com/ILIAS-eLearning/ILIAS/commit/47c8462bf46bbebd543a9f3b39c7896b0e9e7362
- https://github.com/ILIAS-eLearning/ILIAS/blob/v10.11/components/ILIAS/QTI/classes/class.ilQtiMatImageSecurity.php#L110-L122
- https://github.com/ILIAS-eLearning/ILIAS
- https://www.vulncheck.com/advisories/ilias-before-9.24-10.12-and-11.5-unrestricted-file-upload-via-qti-import
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.