Missing Authorization vulnerability in Cozy Vision Technologies Pvt. (CVE-2026-110882)

This vulnerability (CVE-2026-110882) in Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications product arises from missing authorization controls. This means that certain operations or data may be accessible without proper permission checks due to incorrectly configured access control security levels. The affected versions include all versions up to 4.0.1. The CVSS 3.1 base score is 4.3, indicating a medium severity issue with network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The impact is limited to integrity, meaning unauthorized users may be able to perform actions or modify data they should not have access to. There is no confidentiality or availability impact reported. The vulnerability could allow attackers with low privileges to exploit the missing authorization to alter data or system state improperly.

No official patch or remediation guidance is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, organizations should review and tighten access control configurations for SMS Alert Order Notifications and restrict access to trusted users only.