Skip to content
OpenAdvisories

Product · pppscn

SmsForwarder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-110618

    SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API

    SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and co…

    pppscn SmsForwarder