VULNERABILITY INTELLIGENCE
CVE-2026-26418
CVSS score7.5 HIGH
EPSS probability0.48%
CISA KEVNot currently listed
Published2026-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Product