{"id":"CVE-2026-108121","published":"2026-10-19T06:17:22.163","lastModified":"2026-10-19T21:03:42.880","description":"Brian Mariani from DigitalCanion SA has discovered a  vulnerability in the domain creation functionality of koozali's \nSME Server version 11.0rc1-215, allowing an attacker with high privileges \nto inject reserved Apache configuration directives, corrupting \nhttpd.conf and preventing Apache from starting after a server reboot, \nresulting in a denial-of-service (DoS) condition affecting the web \nserver and its hosted virtual hosts.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-20","CWE-96","CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://digitalcanion.com/en/security-research/#vendor=koozali","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}