This vulnerability (CVE-2026-54802) affects Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications product versions <= 3.9.3. It involves missing authorization checks, enabling unauthenticated attackers to bypass access controls. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is high confidentiality impact with no integrity or availability impact. No patch or official remediation level has been published as of the data provided.

The vulnerability allows unauthenticated attackers to bypass authorization controls, potentially exposing sensitive information or functionalities that should be restricted. According to the CVSS vector, the confidentiality impact is high, meaning sensitive data could be disclosed. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Cozy Vision Technologies' communications for updates. Until a patch is available, consider restricting access to the affected system and implementing compensating controls to limit exposure.