Remote Code Execution Vulnerability in Gammu SMS Daemon by Drupal
CVE-2026-76757

5.9MEDIUM

Key Information:

Vendor

Drupal
Status
Gammu Sms Daemon
Vendor
CVE Published:
2 September 2026

What is CVE-2026-76757?

The Gammu SMS Daemon, part of the Drupal ecosystem, is susceptible to a remote code execution vulnerability. This issue allows potential attackers to execute arbitrary code on the server, posing significant risks to application integrity and data security. Users of affected Gammu SMS Daemon versions should take immediate action to mitigate risks by applying relevant security updates or patches. For detailed information, refer to the Drupal security advisory.

Affected Version(s)

Gammu SMS Daemon *.*

References

https://www.drupal.org/sa-contrib-2026-100
vendor-advisory
https://disclosure.cmlara.com/2026/002-Gammu_smsd-TokenDi...
technical-descriptionthird-party-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Greg Knaddison (greggles)
Heine Deelstra (heine)
Juraj Nemec (poker10)
Jess (xjm)
.