CVE-2026-108113

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-108113
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108113.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-108113
Published
2026-10-09T15:04:59Z
Modified
2026-10-11T02:46:57Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
Details

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htaccess and PHP file to the web-served image directory, achieving remote code execution as the web server user.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108113.json"
}
References

Affected packages

Git / github.com/ilias-elearning/ilias

Affected ranges

Type
GIT
Repo
https://github.com/ilias-elearning/ilias
Events
Introduced
1c8bf8cc27b0881847735d41f09e9424b8f17a70
Fixed
ba6f1323d3ae1cd77a06b67b7d525b9abb951912
Introduced
cf8158610d18ee0277ee743de16b79d09bcf7af6
Fixed
c59c67f6c3d824d8d995760f12031b6684d6d6dd
Introduced
2151d66e5092fc346bf0bacb49ab7edb468596b3
Fixed
d6a93383d7e0e27cf8c6699722ebc331244c3cda
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "5.2.8"
        },
        {
            "fixed": "9.24"
        },
        {
            "introduced": "10.0"
        },
        {
            "fixed": "10.12"
        },
        {
            "introduced": "11.0"
        },
        {
            "fixed": "11.5"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v10.*
v10.0
v10.10
v10.11
v10.2
v10.3
v10.4
v10.5
v10.6
v10.7
v10.8
v10.9
v11.*
v11.0
v11.1
v11.2
v11.3
v11.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108113.json"