CVE-2022-31266: Ilias

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Affected products

• Ilias Ilias: up to and including 7.10

Published 2022-06-29. Last modified 2026-06-17.