CVE-2026-110761 | ILIAS up to 9.23/10.11/11.4 Test Import unserialize tst_sequence deserialization

October 14, 2026 Yanac

A vulnerability was found in ILIAS up to 9.23/10.11/11.4 and classified as critical. This affects the function unserialize of the component Test Import. The manipulation of the argument tst_sequence results in deserialization.

This vulnerability is reported as CVE-2026-110761. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More