PT-2026-23477 · Tata Consultancy Services · Cognix Recon Client

Aksalsalimi · Publicado 2026-03-05 · Atualizado 2026-03-08 · CVE-2026-26417

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0

Description A broken access control issue exists in the password reset functionality. Authenticated users can reset passwords for any user account by sending specially crafted requests.

Recommendations Apply updates to address the access control flaw in the password reset functionality.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-26417

Produtos afetados

Cognix Recon Client

Referências · 8

• 🔥 https://github.com/aksalsalimi/CVE-2026-26417 · Exploit
• https://osv.dev/vulnerability/CVE-2026-26417 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2030755442263990444 · Publicação no Twitter
• https://t.me/CVEtracker/46467 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-26417 · Nota de Segurança
• https://github.com/aksalsalimi/cognix-recon-client-security-advisories · Nota
• https://twitter.com/TheHackerWire/status/2030635798849368429 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2030757143041687895 · Publicação no Twitter