PT-2026-23477 · Tata Consultancy Services · Cognix Recon Client

Aksalsalimi · Published 2026-03-05 · Updated 2026-03-08 · CVE-2026-26417

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0

Description A broken access control issue exists in the password reset functionality. Authenticated users can reset passwords for any user account by sending specially crafted requests.

Recommendations Apply updates to address the access control flaw in the password reset functionality.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-26417

Affected Products

Cognix Recon Client

References · 8

• 🔥 https://github.com/aksalsalimi/CVE-2026-26417 · Exploit
• https://osv.dev/vulnerability/CVE-2026-26417 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26417 · Security Note
• https://twitter.com/CVEnew/status/2030755442263990444 · Twitter Post
• https://t.me/CVEtracker/46467 · Telegram Post
• https://github.com/aksalsalimi/cognix-recon-client-security-advisories · Note
• https://twitter.com/TheHackerWire/status/2030635798849368429 · Twitter Post
• https://twitter.com/infoflowcloud/status/2030757143041687895 · Twitter Post