VulnSocial

CVE-2026-26417Disclosure(tcs / cognix_platform)

LOWCVSS 8.1 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests.

tcs CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cognix_platform

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
tcs
Products
cognix_platform

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-08: 3Technical Details · 2026-03-08: 303-08
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-26417 A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset pa… https://www.cve.org/CVERecord?id=CVE-2026-26417 ----- Traducción: CVE-2026-26417 Una… http://infoflow.cloud`

    Post summary

    CVE‑2026‑26417 is described as a broken access control flaw in the password reset feature of TCS Cognix Recon Client v3.0; the post provides technical details but no PoC, exploit code, active exploitation, or patch information.

    0000054
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26417 A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset pa… https://www.cve.org/CVERecord?id=CVE-2026-26417

    Post summary

    The message discloses CVE‑2026‑26417, describing a broken access control flaw in Tata Consultancy Services’ Cognix Recon Client v3.0 that permits authenticated users to reset passwords.

    00000381
    56.6K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-26417 - High A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user... https://www.thehackerwire.com/vulnerability/CVE-2026-26417/ https://t.co/mIw65ekjKd

    Post summary

    The post announces a high‑severity broken access control vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 that lets authenticated users reset other users’ passwords.

    0000045
    130 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apptcscognix_platform3.0--

Explore more

Back to dashboardtcs CVEscognix_platform vulnerabilities