Drupal Gammu SMS Daemon: RCE via Unvalidated SMS Data
CVE-2026-76757 Published on September 2, 2026

Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.

NVD

Vulnerability Analysis

CVE-2026-76757 can be exploited with network access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2026-76757 has been classified to as a Buffer Overflow vulnerability or weakness.


Affected Versions

Drupal Gammu SMS Daemon Version *.* is affected by CVE-2026-76757