CVE-2026-110882
Received Received - Intake

Missing Authorization in SMS Alert Order Notifications

Publication date: 2026-10-17

Last updated on: 2026-10-17

Assigner: Patchstack

Description
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-17
Last Modified
2026-10-17
Generated
2026-10-17
AI Q&A
2026-10-17
EPSS Evaluated
N/A
NVD
CVE-2026-110882
EUVD
EUVD-2026-103302

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications plugin. It allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions.

Impact Analysis

An attacker could exploit this to perform unauthorized actions within the SMS Alert plugin, potentially sending unauthorized messages or accessing sensitive data. The impact is limited as it requires some access privileges (PR:L).

Compliance Impact

This vulnerability involves missing authorization in SMS Alert Order Notifications, allowing incorrect access control exploitation. It may lead to unauthorized data exposure or modification, which could violate GDPR's data protection requirements or HIPAA's safeguards for protected health information if sensitive data is involved.

Mitigation Strategies

Update SMS Alert Order Notifications to the latest version beyond 4.0.1 to address the missing authorization issue. Review and correct access control security configurations to ensure proper authorization checks are in place.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110882. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart