CVE-2026-108121
CVE-2026-108121 · Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from starting after a server reboot, resulting in a denial-of-service (DoS) condition affecting the web server and its hosted virtual hosts.
CVSS 6.9 · Moyenne · EPSS 0,3%
- Publication
- Mise à jour
Produits et versions concernés
sme server
- Versions du logiciel
- 11.0rc1-215: Concernée
Aucun correctif publié