CVE-2026-108121: SME Server 11.0rc1-215

Affected technology

SME Server · 11.0rc1-215
Koozali

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction

What an attacker can do

An attacker with high privileges can inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from starting after a server reboot, resulting in a denial-of-service (DoS) condition affecting the web server and its hosted virtual hosts. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.