PatchSiren

Koozali CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Koozali CVE published 2026-10-19

CVE-2026-108121

CVE-2026-108121 is a vulnerability in koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from starting after a server reboot, resulting in a denial-of-service (DoS) condition affecting the web server and its hosted virtual hosts.

HIGH koozali CVE published 2026-10-19

CVE-2026-108120

A path traversal vulnerability was discovered in the View Logs functionality of SME Server version 11.0rc1-215, allowing an unauthenticated attacker to access files outside of the intended directory. This could lead to exfiltration of sensitive system and application files. Defenders should assess exposure and prioritize verification and remediation efforts. The vulnerability has a high CVSS score of 7.7, [truncated]