CVE-2026-26418 - Vulnerability Analysis

Overview

Tata Consultancy Services Cognix Recon Client v3.0 contains a broken access control caused by missing authentication and authorization in the web API, letting remote attackers access application functionality without restriction, exploit requires network access.

Severity & Score

Impact

Remote attackers can access application functionality without restriction, potentially leading to unauthorized data access or manipulation.

Mitigation

Update to the latest version with proper authentication and authorization implemented.

References

• https://github.com/aksalsalimi/cognix-recon-client-security-advisories
• https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx
• https://github.com/aksalsalimi/CVE-2026-26418

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner