https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:31:34.068965+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338043 EUVD-2026-338043 2026-10-09T20:31:34.079037+00:00 EUVD-2026-338043 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12789 fkie_cve-2026-12789 2026-10-09T20:31:34.079087+00:00

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. This issue was independently identified and fixed internally by the vendor's own security team ahead of this report.

 https://cve.radiocsirt.org/vuln/ghsa-69g6-pggc-389p GHSA-69g6-pggc-389p 2026-10-09T20:31:34.079141+00:00

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2016 WID-SEC-W-2026-2016 — ILIAS: Schwachstelle ermöglicht SQL-Injection 2026-10-09T20:31:34.079175+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in ILIAS ausnutzen, um einen SQL-Injection Angriff durchzuführen.