Open Source ILIAS

Name: Open Source ILIAS
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

4critical3high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-80428US	critical9.8	4.67% (92nd)	Exploit	10.10	2026-08-26	3 versions
CVE-2026-107639US	high8.8	0.68% (52nd)	—	10.12	2026-10-08	3 versions
CVE-2026-108113US	high8.8	0.64% (50th)	—	10.12	2026-10-09	3 versions
CVE-2026-110761US	high8.8	0.57% (47th)	—	10.12	2026-10-14	3 versions
CVE-2026-82877US	medium6.5	0.55% (46th)	—	10.0	2026-08-31	4 versions
CVE-2025-55166US	—	0.51% (44th)	—	9.17	2025-08-12	< 9.17
CVE-2025-11344US	critical9.8	0.51% (43rd)	—	10.2	2025-10-06	3 versions
CVE-2025-11346US	critical9.8	0.45% (39th)	—	10.2	2025-10-06	3 versions
CVE-2026-86416US	medium5.4OT elevated	0.45% (39th)	—	10.11	2026-09-07	4 versions
CVE-2025-11345US	critical9.8	0.37% (31st)	—	10.2	2025-10-06	3 versions
CVE-2026-18745US	—	—	—	10.10	2026-09-04	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.