Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-116386 | 9.8 critical | 0.00% | cozy vision technologies pvt. ltd., sms alert order notifications | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | Fri 30 Oct |
| CVE-2026-54803 | 9.8 critical | 0.00% | no CPE yet | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions. | 26 Oct |
| CVE-2026-66424 | 9.8 critical | 0.00% | no CPE yet | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. | 24 Oct |
| CVE-2026-59540 | 9.8 critical | 0.00% | no CPE yet | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. | 24 Oct |
| CVE-2025-49915 | 9.3 critical | 0.00% | no CPE yet | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.5. | 8 Oct |
5 of 5
Download these 5 as CSV · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.