# CVE-2026-80428

Published articles for CVE-2026-80428.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## \[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE

DevFeed: [\[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE](<https://devfeed.tech/articles/remote-cve-2026-80428-unauthenticated-php-object-injection-via-shibboleth-ilias-9-22-10-0-10-10-11-0-11-3-rce-34775.md>)

Original publisher: [Read original article](<https://www.exploit-db.com/exploits/52682>)

Author: DigiProSec

Published: 2026-09-11T00:00:00Z

Content type: news

Language: en

Sources: [Exploit-DB.com RSS Feed](<https://devfeed.tech/sources/exploit-db-com-rss-feed.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [PHP](<https://devfeed.tech/topics/php.md>)

Tags: [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-80428](<https://devfeed.tech/tags/cve-2026-80428.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [multiple](<https://devfeed.tech/tags/multiple.md>), [object](<https://devfeed.tech/tags/object.md>), [php](<https://devfeed.tech/tags/php.md>), [rce](<https://devfeed.tech/tags/rce.md>), [remote](<https://devfeed.tech/tags/remote.md>)

### AI overview

CVE-2026-80428 is an unauthenticated PHP object injection vulnerability via Shibboleth in ILIAS versions earlier than 9.22, 10.10, and 11.3, with remote code execution indicated.

### Source excerpt

CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE