AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-66424

CRITICAL · CVSS 9.8 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated users to escalate privileges within SMS Alert Order Notifications versions up to 3.9.7, potentially granting unauthorized access to sensitive functionalities. This critical flaw poses a significant risk to systems utilizing these versions, making it imperative for organizations using SMS Alert to prioritize immediate updates or mitigations. Security teams should assess their environments for this vulnerability to prevent exploitation.

CVE
CVE-2026-66424
Severity
CRITICAL
CVSS
9.8
EPSS
0.33%

Original NVD Description

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.