CVE-2026-110761

The ILIAS platform (versions before 9.24 , 10.12 , and 11.5 ) is vulnerable to a PHP object injection vulnerability during the Test results import process. Authenticated users with permissions to create or import tests can exploit this by providing a crafted Test archive . The vulnerability occur...

CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...