CVE-2026-108121 in SME Server
Riassunto
di MITRE • 19/10/2026
Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from starting after a server reboot, resulting in a denial-of-service (DoS) condition affecting the web server and its hosted virtual hosts.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.