Threat database

CVE-2026-110882 is a missing authorization vulnerability in Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications plugin, affecting versions prior to 4.0.2. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized modification of information. The vulnerability has a medium severity with a CVSS score of 4.3.

CVE-2026-95594 is an Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications plugin. It allows privilege escalation affecting versions from 0 up to but not including 4.0.1. The vulnerability has a high severity with a CVSS score of 8.1.

Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.

CVE-2026-54803 is a critical vulnerability in Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications product, affecting versions up to and including 3.9.4. It involves incorrect authorization that allows subscriber privilege escalation. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-54802 is a high severity vulnerability in Cozy Vision Technologies Pvt. Ltd.'s SMS Alert Order Notifications product. Versions up to and including 3.9.3 suffer from missing authorization controls, allowing unauthenticated users to access certain functionalities. The vulnerability is classified under CWE-862 (Missing Authorization). No official patch or remediation guidance has been provided yet.