CVE-2026-26416

8.8 highEPSS 0.4%

High (8.8) in tcs cognix platform. EPSS 0.4% chance of exploitation in the next 30 days.

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2026-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tcs:cognix_platform

References

https://github.com/aksalsalimi/CVE-2026-26416
https://github.com/aksalsalimi/cognix-recon-client-security-advisories
https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx

Check your stack JSON