CVE-2026-26416

HIGH

TCS Cognix Recon Client 3.0 - Privilege Escalation

Title source: llm

Description

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.

Exploits (1)

github WRITEUP 10 stars

by XiaomingX · pythonpoc

https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2026/CVE-2026-26416

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory] https://github.com/aksalsalimi/CVE-2026-26416

[Various Sources] https://github.com/aksalsalimi/cognix-recon-client-security-advisories

[Various Sources] https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx

Scores

CVSS v3 8.8

EPSS 0.0004

EPSS Percentile 13.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-269

Status published

Products (1)

tcs/cognix_platform 3.0

Published Mar 05, 2026

Tracked Since Mar 06, 2026