Vulnerability in Gammu SMS Daemon Affects Drupal Products
CVE-2026-76755

5.9MEDIUM

Key Information:

Vendor

Drupal
Status
Gammu Sms Daemon
Vendor
CVE Published:
2 September 2026

What is CVE-2026-76755?

A security vulnerability has been identified in the Gammu SMS Daemon, which can potentially expose affected systems using this application on the Drupal platform to various security risks. Users of Gammu SMS Daemon should review the advisory from Drupal to understand the scope of the issue and take appropriate actions to safeguard their applications.

Affected Version(s)

Gammu SMS Daemon *.*

References

https://www.drupal.org/sa-contrib-2026-100
vendor-advisory
https://disclosure.cmlara.com/2026/001-Gammu_smsd-RCE/
third-party-advisorytechnical-description

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Greg Knaddison (greggles)
Heine Deelstra (heine)
Juraj Nemec (poker10)
Jess (xjm)
.