PT-2026-23476 · Tata Consultancy Services · Cognix Recon Client

Aksalsalimi · Published 2026-03-05 · Updated 2026-03-08 · CVE-2026-26416

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0

Description An authorization bypass exists in Tata Consultancy Services Cognix Recon Client version 3.0. Authenticated users can escalate privileges across role boundaries by sending specially crafted requests.

Recommendations Apply updates to address the authorization bypass in Tata Consultancy Services Cognix Recon Client version 3.0.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-26416

Affected Products

Cognix Recon Client

References · 8

• 🔥 https://github.com/aksalsalimi/CVE-2026-26416 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26416 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26416 · Vendor Advisory
• https://tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx · Note
• https://github.com/aksalsalimi/cognix-recon-client-security-advisories · Note
• https://twitter.com/TheHackerWire/status/2030635748832206892 · Twitter Post
• https://twitter.com/CVEnew/status/2030755440938627551 · Twitter Post
• https://t.me/CVEtracker/46466 · Telegram Post