Skip to main content

Gammu Sms Daemon

3 CVEs product

Monthly

CVE-2026-76757 Sep 02, 12:32 PHP MEDIUM This Month

Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module exposes high-privilege authenticated administrators to memory corruption that yields both confidentiality and integrity compromise. The vulnerability affects all released versions of the module (*.* wildcard CPE), with no patched release confirmed in the provided data. No public exploit code or CISA KEV listing has been identified at time of analysis, and the high attack complexity combined with the requirement for elevated Drupal privileges substantially limits opportunistic exploitation.

Buffer Overflow Drupal Gammu Sms Daemon
NVD
CVSS 3.1
5.9
EPSS
0.2%
CVE-2026-76756 Sep 02, 12:32 PHP MEDIUM This Month

Buffer overflow in the Drupal Gammu SMS Daemon contributed module exposes sites to memory corruption with high confidentiality and integrity impact. The vulnerability (CWE-119) requires network-reachable access by a highly privileged user under specific conditions, limiting its practical reach but making it serious when those conditions are met. No public exploit code has been identified at time of analysis, and the Drupal security team has issued advisory SA-contrib-2026-100.

Buffer Overflow Drupal Gammu Sms Daemon
NVD
CVSS 3.1
5.9
EPSS
0.2%
CVE-2026-76755 Sep 02, 12:32 PHP MEDIUM This Month

Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module allows a highly privileged, authenticated attacker to achieve high confidentiality and integrity impact against affected Drupal installations. The CVSS vector (PR:H, AC:H) constrains real-world exploitability significantly, requiring both administrative access and complex attack conditions. No active exploitation has been identified; all tracked versions of the module are reported as affected with no specific patched release confirmed in available data.

Buffer Overflow Drupal Gammu Sms Daemon
NVD
CVSS 3.1
5.9
EPSS
0.2%
EPSS 0% CVSS 5.9
MEDIUM This Month

Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module exposes high-privilege authenticated administrators to memory corruption that yields both confidentiality and integrity compromise. The vulnerability affects all released versions of the module (*.* wildcard CPE), with no patched release confirmed in the provided data. No public exploit code or CISA KEV listing has been identified at time of analysis, and the high attack complexity combined with the requirement for elevated Drupal privileges substantially limits opportunistic exploitation.

Buffer Overflow Drupal Gammu Sms Daemon
NVD
EPSS 0% CVSS 5.9
MEDIUM This Month

Buffer overflow in the Drupal Gammu SMS Daemon contributed module exposes sites to memory corruption with high confidentiality and integrity impact. The vulnerability (CWE-119) requires network-reachable access by a highly privileged user under specific conditions, limiting its practical reach but making it serious when those conditions are met. No public exploit code has been identified at time of analysis, and the Drupal security team has issued advisory SA-contrib-2026-100.

Buffer Overflow Drupal Gammu Sms Daemon
NVD
EPSS 0% CVSS 5.9
MEDIUM This Month

Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module allows a highly privileged, authenticated attacker to achieve high confidentiality and integrity impact against affected Drupal installations. The CVSS vector (PR:H, AC:H) constrains real-world exploitability significantly, requiring both administrative access and complex attack conditions. No active exploitation has been identified; all tracked versions of the module are reported as affected with no specific patched release confirmed in available data.

Buffer Overflow Drupal Gammu Sms Daemon
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy