CVE-2026-110618

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

EUVD-2026-101246

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

CVE-2026-110618 SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

CVE-2026-110618

The SmsForwarder application (versions through 3.5.0 ) is vulnerable to a missing authentication flaw within its AndServer HTTP server . This vulnerability allows unauthenticated network attackers to invoke remote-control APIs. Successful exploitation enables attackers to read SMS messages , call...

CVE-2026-110618 SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

CVE-2026-110618: Missing Authentication for Critical Function

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

PT-2024-29356

Name of the Vulnerable Software and Affected Versions AndServer version 2.1.12 Description The issue concerns a Directory Traversal problem. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. Recommendation...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

AndServer 安全漏洞

AndServer is an HTTP and reverse proxy server by Zhenjie Yan, an individual developer. A security vulnerability exists in AndServer version 2.1.12 and earlier, which stems from vulnerability to directory traversal attacks...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

CVE-2024-41310: Improper Limitation of a Pathname to a Restricted Directory

AndServer 2.1.12 is vulnerable to Directory Traversal...

CVE-2024-41310

AndServer 2.1.12 is vulnerable to Directory Traversal...

CVE-2024-41310

CVE-2024-41310 affects AndServer 2.1.12 and earlier and is a directory-traversal vulnerability. Public documents consistently describe directory traversal as the issue stemming from AndServer (HTTP/reverse proxy) without detailing a specific root-cause mechanism beyond that classification. The NV...