VYPR
Unrated severityNVD Advisory· Published Oct 6, 2025· Updated Feb 24, 2026

ILIAS Certificate Import code injection

CVE-2025-11344

Description

A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Ilias/Iliascpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=8.23 / <=9.13 / <=10.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.