HIGH 7.7 NVD
CVE-2026-108120
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 al
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of
koozali's SME Server version 11.0rc1-215 allowing an unauthenticated
attacker to access files outside of the intended directory, leading to
exfiltration of files located outside the intended system logs
directory, including potentially sensitive system and application files.
References
This high severity vulnerability with a CVSS score of 7.7 was published on 2026-10-19 via NVD.
vulnfeed aggregates 17512 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.