Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-116386 | 9.8 critical | — | cozy vision technologies pvt. ltd., sms alert order notifications | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | Fri 30 Oct |
| CVE-2026-54803 | 9.8 critical | 0.00% | no CPE yet | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions. | Mon 26 Oct |
| CVE-2026-66424 | 9.8 critical | 0.00% | no CPE yet | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. | 24 Oct |
| CVE-2026-59540 | 9.8 critical | 0.00% | no CPE yet | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. | 24 Oct |
| CVE-2025-49915 | 9.3 critical | 0.00% | no CPE yet | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.5. | 8 Oct |
| CVE-2026-95594 | 8.1 high | 0.00% | no CPE yet | Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0. | 12 Oct |
| CVE-2026-54802 | 7.5 high | 0.00% | no CPE yet | Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions. | Mon 26 Oct |
| CVE-2025-66086 | 5.3 medium | 0.00% | no CPE yet | Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.8. | 18 Oct |
| CVE-2026-110882 | 4.3 medium | 0.00% | no CPE yet | Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1. | 19 Oct |
9 of 9
Download these 9 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.