CVE-2026-85135CWE-284CWE-434broken-access-controlunrestricted-file-upload

CVE-2026-85135

Medium · published September 3, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The attack may be launched remotely. Upgrading to version 9.22, 10.10 and 11.3 is able to mitigate this issue. The patch is identified as ef5d7f99fe1ea0381db04b333a2906548b3590e4/b0d61be43671b6bfe91baf469a5ee11e764f2e23. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00366 · 29.2th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-03T19:17Z
References (6)
https://github.com/ILIAS-eLearning/ILIAS/commit/b0d61be43671b6bfe91baf469a5ee11e764f2e23 · [email protected]https://github.com/ILIAS-eLearning/ILIAS/releases/tag/v11.3 · [email protected]https://vuldb.com/cve/CVE-2026-85135 · [email protected]https://vuldb.com/submit/892842 · [email protected]https://vuldb.com/vuln/398335 · [email protected]https://vuldb.com/vuln/398335/cti · [email protected]
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 14:00Z
    ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
    cvelistv5