CVE-2026-82877
published 2026-08-31CVE-2026-82877: ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read…
PriorityP344medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.55%
44.8th percentile
ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import directory and retrieve sensitive files including configuration files containing database credentials and setup passwords.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ilias-elearning_e.v | ilias | >= 10.0 < 10.10 | 10.10 |
| ilias-elearning_e.v | ilias | >= 11.0 < 11.3 | 11.3 |
| ilias-elearning_e.v | ilias | >= 9.0 < 9.22 | 9.22 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv4.07.1HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
ILIAS up to 9.21/10.9/11.2 SOAP Import addFile path traversal
vuldb·2026-09-06·CVSS 6.5
CVE-2026-82877 [MEDIUM] ILIAS up to 9.21/10.9/11.2 SOAP Import addFile path traversal
A vulnerability, which was classified as problematic, was found in ILIAS up to 9.21/10.9/11.2. The impacted element is the function addFile of the component SOAP Import. Executing a manipulation can lead to path traversal.
The identification of this vulnerability is CVE-2026-82877. The attack may be launched remotely. There is no exploit available.
You should upgrade the affected component.
GHSA
ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by sup
ghsa_unreviewed·2026-08-31
CVE-2026-82877 [HIGH] CWE-22 ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by sup
ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import directory and retrieve sensitive files including configuration files containing database credentials and setup passwords.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225630&ref_id=35https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225631&ref_id=35https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=225632&ref_id=35https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=934https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=935https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=wy:ll:6t&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=15821&blpg=936https://schweigertit.de/en/advisories/SIT-2026-003.htmlhttps://www.vulncheck.com/advisories/ilias-arbitrary-file-read-via-soap-addfile
2026-08-31
Published