https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T03:41:01.977627+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110761 CVE-2026-110761 — ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import 2026-10-16T03:41:01.978349+00:00

Affected: ILIAS-eLearning e.V. ILIAS

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tst_sequence sequence attribute that is passed to unserialize(), abusing Guzzle or Monolog gadget chains to write PHP files and execute code.