These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
ILIAS eLearning platform versions before 9.24, 10.12, and 11.5 are vulnerable to argument injection via image map question upload filenames. This allows question authors to inject ImageMagick convert options, potentially leading to remote code execution. The vulnerability is in the assImagemapQuestionGUI component, and defenders should assess exposure and prioritize patching or mitigation. The CVE record [truncated]
CVE-2026-86416 is an authorization bypass vulnerability affecting ILIAS learning management system versions before 9.23, 10.11, and 11.4. Authenticated users with read-only access can modify group settings and permissions, potentially changing group modes and permissions for all members. This vulnerability exists in the ilObjGroupGUI class, specifically in the saveMapSettingsObject() and updateGroupTypeOb [truncated]
ILIAS eLearning platform versions before 9.22, 10.10, and 11.3 have a SQL injection vulnerability. Authenticated users with write permission can inject SQL via the sort parameter in the repository trash table, potentially leading to full database access and administrator account takeover. This vulnerability requires immediate attention from administrators and security teams to assess exposure and apply pa [truncated]
ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import directory and retrieve sensitive files including configuration files containing database cr [truncated]
The ILIAS learning management system, prior to versions 9.22, 10.10, and 11.3, contains an unauthenticated PHP object injection vulnerability. This vulnerability allows unauthenticated attackers to execute arbitrary code by injecting serialized objects through the LTI authentication endpoint and triggering deserialization via the Shibboleth back-channel logout endpoint. The vulnerability has a CVSS score [truncated]
