Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionali…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com
• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 5, 2026 · NIST NVD

   Detected

   Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network.

2. Jun 17, 2026 · NIST NVD

   Updated

   Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network.

Affected

• cpe tcs/cognix platform3.0

Sources

• CVE.orgVulnerability recordCVE-2026-26418

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-26418

  Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network.

  nvd.nist.gov

References

• Third Party Advisory · github.com
• Third Party Advisory · github.com
• Product · tcs.com