Vulnerability Description
An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java component
CVSS Score
7.3
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Related Weaknesses (CWE)
References
- https://github.com/wudijun/jun.github.io/blob/main/SMSGate%20deserialization%20v
- https://github.com/wudijun/jun.github.io/blob/main/SMSGate%20deserialization%20v
FAQ
What is CVE-2026-37579?
CVE-2026-37579 is a vulnerability with a CVSS score of 7.3 (HIGH). An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java component
How severe is CVE-2026-37579?
CVE-2026-37579 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-37579?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.