PatchSiren cyber security CVE debrief
CVE-2026-76757 Drupal CVE debrief
A vulnerability in the Drupal Gammu SMS Daemon affects versions *.*. The issue has a CVSS score of 5.9 and is classified as MEDIUM severity. The CVE record was published on 2026-09-02T13:18:10.977Z and was last modified on 2026-09-19T16:16:31.030Z. This vulnerability requires verification of affected versions and monitoring for potential exploitation attempts. Defenders should assess exposure and prioritize verification of Gammu SMS Daemon installations. The CVE record and NVD entry provide limited information about the vulnerability.
- Vendor
- Drupal
- Product
- Gammu SMS Daemon
- CVSS
- MEDIUM 5.9
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-09-02
- Original CVE updated
- 2026-09-19
- Advisory published
- 2026-09-02
- Advisory updated
- 2026-09-19
Who should care
Defenders responsible for Drupal Gammu SMS Daemon installations should assess exposure and prioritize verification. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify the affected versions of Gammu SMS Daemon in their environment and assess exposure.
Why it matters
The vulnerability in Drupal Gammu SMS Daemon requires verification of affected versions and monitoring for potential exploitation attempts.
- Verification of affected versions is required to determine exposure
- Potential exploitation attempts should be monitored
Technical summary
The Drupal Gammu SMS Daemon vulnerability affects versions *.* and has a CVSS score of 5.9. It is classified as MEDIUM severity. The vulnerability requires verification of affected versions and monitoring for potential exploitation attempts. The CVE record and NVD entry provide limited information about the vulnerability. Further analysis is required to determine the impact and affected versions.
Defensive priority
Defenders should prioritize verifying the affected versions of Gammu SMS Daemon in their environment and assess exposure.
Recommended defensive actions
- Verify the version of Gammu SMS Daemon in use
- Assess exposure to the vulnerability
- Monitor for potential exploitation attempts
Evidence notes
The CVE record and NVD entry provide limited information about the vulnerability. Further analysis is required to determine the impact and affected versions.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-76757 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-76757
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-76757 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76757
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://disclosure.cmlara.com/2026/002-Gammu_smsd-TokenDisclosure/
-
Source reference
Unverified legacy reference
URL: https://www.drupal.org/sa-contrib-2026-100
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.