CVE-2026-110882

Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1.

• CWE-862

• https://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-4-0-1-broken-access-control-vulnerability?_s_id=cve

Published

Oct 17, 2026

Last Modified

Oct 18, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-110875AdPlug through 2.4 contains a heap-based buffer overflow in …6.1
• CVE-2026-110876AdPlug through 2.4 contains an out-of-bounds read vulnerabil…5.5
• CVE-2026-110877AdPlug through 2.4 contains a heap out-of-bounds read vulner…5.5
• CVE-2026-110878Aureus ERP through 1.6.0 contains a stored cross-site script…5.4
• CVE-2026-11088Integer overflow in ANGLE in Google Chrome prior to 149.0.78…9.6
• CVE-2026-110880Missing Authorization vulnerability in Kit Kit (formerly Con…6.5
• CVE-2026-110883Authentication Bypass by Primary Weakness vulnerability in V…6.5
• CVE-2026-110885Improper Control of Generation of Code ('Code Injection') vu…6.5
• CVE-2026-110886Deserialization of Untrusted Data vulnerability in QuantumCl…9.8
• CVE-2026-110888Missing Authorization vulnerability in Meow Apps AI Engine a…4.3
• CVE-2026-110889Generation of Error Message Containing Sensitive Information…7.5
• CVE-2026-11089Uninitialized Use in Media in Google Chrome prior to 149.0.7…6.5