CVE-2026-26416

Katalog CVE

CVSS 8.8 · High EPSS 0,59%

Kerentanan Improper Privilege Management pada tcs cognix platform. Skor CVSS 3.1 8.8 (High) menurut CISA ADP.

Deskripsi (NVD)

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.

Rincian

Terbit di NVD

5 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/aksalsalimi/CVE-2026-26416 advisory pihak ketiga
• https://github.com/aksalsalimi/cognix-recon-client-security-advisories advisory pihak ketiga
• https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agilit... product