Verified

CVE-2026-94258: SMS Alert 3.6.4 to before 4.0.1

Affected technology

SMS Alert · 3.6.4 to before 4.0.1
Vendor not specified by the source

Description’s affected range: before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 2026-10-08 08:49:51.268887+00:00

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-08 08:50:52.119177+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-08 08:49:39.219831+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-94258.html