NVD HIGH: CVE-2026-108113 — ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerab...

Friday, October 9, 2026 at 04:17 PM UTC·Source: NIST NVD

Updated: Saturday, October 10, 2026 at 05:00 AM UTC

Executive Summary

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htaccess and PHP file to the web-served image directory, achieving remote code execution as the web server u

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-108113

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Oct 9, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek .

1h agoSecurityWeek

MEDIUMVulnerability

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on SecurityWeek .

1h agoSecurityWeek

MEDIUMVulnerability

CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window

[object Object]

CVE-2026-109618CVE-2026-109619

8h agor/netsec