{"id":"CVE-2026-76756","aliases":["DRUPAL-CONTRIB-2026-100","EUVD-2026-70013","GHSA-7cxp-6pj4-g36m"],"status":"published","title":"Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100","description":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0036,"percentile":0.30042,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2026-08-19T17:16:30Z","modified":"2026-09-19T15:32:18Z","affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/gammu_smsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"bundled":3}],"products":[{"vendor":"drupal","product":"gammu sms daemon"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-100","tags":["vendor-advisory","web"]},{"url":"https://disclosure.cmlara.com/2026/003-Gammu_smsd-TimingAttack/","tags":["third-party-advisory","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76756"},{"url":"https://disclosure.cmlara.com/2026/003-Gammu_smsd-TimingAttack"},{"url":"https://github.com/advisories/GHSA-7cxp-6pj4-g36m"}],"sources":{"cve":[{"id":"CVE-2026-76756","title":"Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100","description":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","status":"published","published":"2026-09-02T12:32:28.835Z","modified":"2026-09-19T15:00:07.848Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T13:46:32.755125Z"}],"euvd":[{"id":"EUVD-2026-70013","description":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","status":"published","published":"2026-09-02T12:32:28Z","modified":"2026-09-19T15:00:07Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:06.225065Z"}],"ghsa":[{"id":"GHSA-7cxp-6pj4-g36m","title":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","description":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","status":"published","published":"2026-09-02T15:34:46Z","modified":"2026-09-19T15:32:18Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:12:13.368323Z"}],"nvd":[{"id":"CVE-2026-76756","description":"Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.","status":"published","published":"2026-09-02T13:18:10.883Z","modified":"2026-09-19T15:17:01.91Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:12:43.399612Z"}],"osv":[{"id":"DRUPAL-CONTRIB-2026-100","description":"The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](https://www.drupal.org/drupal-security-team/becoming-primary-maintainer-of-a-project-that-is-unsupported-for-security-reasons).","status":"published","published":"2026-08-19T17:16:30Z","modified":"2026-08-19T19:29:16.053643Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}