CVE-2026-110618 in SmsForwarder
Resumen
por MITRE • 2026-10-14
SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or overwrite configuration via the clone API.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.