CVE-2026-107639 | ILIAS up to 9.23/10.11/11.4 assImagemapQuestionGUI escapeshellcmd argument injection

October 8, 2026 Yanac

A vulnerability was found in ILIAS up to 9.23/10.11/11.4. It has been declared as critical. This affects the function escapeshellcmd of the component assImagemapQuestionGUI. The manipulation results in argument injection.

This vulnerability was named CVE-2026-107639. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More