CVE-2026-82877
ILIAS Arbitrary File Read via SOAP addFile
CVSS Score
6.5
EPSS Score
0.5%
EPSS Percentile
43th
ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import directory and retrieve sensitive files including configuration files containing database credentials and setup passwords.
| CWE | CWE-22 |
| Vendor | ilias-elearning e.v. |
| Product | ilias |
| Published | Aug 31, 2026 |
| Last Updated | Sep 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for ilias-elearning e.v. ilias
Be the first to know when new medium vulnerabilities affecting ilias-elearning e.v. ilias are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
ILIAS-eLearning e.V. / ILIAS
9.0 < 9.22 10.0 < 10.10 11.0 < 11.3
References
docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=936 docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225632&ref_id=35 docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=935 docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225631&ref_id=35 docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=934 docu.ilias.de: https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225630&ref_id=35 vulncheck.com: https://www.vulncheck.com/advisories/ilias-arbitrary-file-read-via-soap-addfile schweigertit.de: https://schweigertit.de/en/advisories/SIT-2026-003.html
Credits
André Schweigert