sme_server vulnerabilities
CVEs whose affected-version data names the sme_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-108121Medium· 6.9Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service
Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration dir…
▾ SunlitKoozali · SME ServerEPSS 0.31%via CVEORG
CVE-2026-108120High· 7.7path traversal inKoozali - SME Server
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended d…
▾ Twilightkoozali · SME ServerEPSS 0.37%via CVEORG