CVE-2026-108121 – Brian Mariani from DigitalCanion SA has discovered a  vulnerability in the domain creation

Brian Mariani from DigitalCanion SA has discovered a  vulnerability in the domain creation functionality of koozali’s
SME Server version 11.0rc1-215, allowing an attacker with high privileges
to inject reserved Apache configuration directives, corrupting
httpd.conf and preventing Apache from starting after a server reboot,
resulting in a denial-of-service (DoS) condition affecting the web
server and its hosted virtual hosts.