CVE-2026-26416

HIGH

TCS Cognix Recon Client 3.0 - Privilege Escalation

Title source: llm

Description

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.

Exploits (1)

github WRITEUP 10 stars

by XiaomingX · pythonpoc

https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2026/CVE-2026-26416

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory] https://github.com/aksalsalimi/CVE-2026-26416

[Various Sources] https://github.com/aksalsalimi/cognix-recon-client-security-advisories

[Various Sources] https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx

Scores

CVSS v3 8.8

EPSS 0.0003

EPSS Percentile 10.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-269

Status draft

Timeline

Published Mar 05, 2026

Tracked Since Mar 06, 2026