CVE-2026-116386 is a critical unauthenticated privilege escalation vulnerability affecting SMS Alert Order Notifications versions up to and including 4.0.2. This flaw allows an attacker to escalate privileges without authentication, potentially leading to full compromise of confidentiality, integrity, and availability.