CVE-2026-82877
ILIAS Arbitrary File Read via SOAP addFile
CVSS score
7.1
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-80428
ILIAS PHP Object Injection via Shibboleth Logout
IE
Patch verified Public Exploits:1EPSS %5
8.7
CVE-2026-107639
ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
IE
Patch verifiedEPSS %1
8.7
CVE-2026-82538
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
IE
Patch verifiedEPSS %1
8.7
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
IE
Patch verifiedEPSS %1
8.7
CVE-2026-110761
ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import
IE
Patch verifiedEPSS %1
5.3
CVE-2026-86416
ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods
IE
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-82877"