High severity8.1NVD Advisory· Published Mar 5, 2026· Updated Jun 17, 2026

CVE-2026-26417

Description

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests.

Affected products

TCS/Cognix Platform
cpe:2.3:a:tcs:cognix_platform:3.0:*:*:*:*:*:*:*
Tata Consultancy Services/Cognix Recon Clientllm-fuzzy
Range: =3.0

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000