CVE-2026-26417

8.1 highEPSS 0.3%

High (8.1) in tcs cognix platform. EPSS 0.3% chance of exploitation in the next 30 days.

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tcs:cognix_platform

References

https://github.com/aksalsalimi/CVE-2026-26417
https://github.com/aksalsalimi/cognix-recon-client-security-advisories

Check your stack JSON