CVE-2026-26416

high

Description

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.

References

Advisories
More

https://github.com/aksalsalimi/cognix-recon-client-security-advisories

https://github.com/aksalsalimi/CVE-2026-26416

https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx

Details

Source: Mitre, NVD

Published: 2026-03-05

Updated: 2026-03-10

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H