CVE-2026-108120
path traversal inKoozali - SME Server
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the intended system logs directory, including potentially sensitive system and application files.
| CWE | CWE-31 |
| Vendor | koozali |
| Product | sme server |
| Published | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for koozali sme server
Be the first to know when new unknown vulnerabilities affecting koozali sme server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
koozali / SME Server
11.0rc1-215
References
Credits
Brian Mariani from DigitalCanion SA