CVE-2026-26418

7.5 highEPSS 0.5%

High (7.5) in tcs cognix platform. EPSS 0.5% chance of exploitation in the next 30 days.

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tcs:cognix_platform

References

https://github.com/aksalsalimi/CVE-2026-26418
https://github.com/aksalsalimi/cognix-recon-client-security-advisories
https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx

Check your stack JSON