Is CVE-2026-82567 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82567?

CVE-2026-82567 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-82567

Description

The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the specified SMS message. An unauthenticated attacker with network access to the notification gateway could exploit this vulnerability to send arbitrary SMS messages through the connected modem.