CVE-2026-26418

CVE-2026-26418 웹 API의 인증 및 권한 부여 누락 취약점 요약 Tata Consultancy Services TCS – Cognix Recon Client v3.0 의 웹 API 계층에서 인증 및 권한 부여 누락 취약점이 확인되었습니다. 특정 노출된 API 엔드포인트가 적절한 인증 및 권한 부여 제어를 적용하지 않아, 적절한 검증 없이 원격으로 애플리케이션 기능에 접근할 수 있었습니다. 기술 분류 CWE CWE-306 – 중요 기능에 대한 인증 누락 CWE-862 – 권한 부여 누락 영향을 받는 엔드포인트...

CVE-2026-26417

CVE-2026-26417 비밀번호 재설정 기능의 취약한 접근 제어 취약점 요약 Tata Consultancy Services TCS – Cognix Recon Client v3.0 에서 취약한 접근 제어 취약점이 확인되었습니다. 이 문제는 적절한 권한 검증 없이 조작된 API 요청을 제출하여 인증된 사용자가 임의의 사용자 계정의 비밀번호를 재설정할 수 있게 했습니다. 이 취약점은 비밀번호 재설정 워크플로우 내에서 소유권 검증 부족과 권한 검사 누락으로 인해 발생했습니다. 기술 분류 CWE CWE-862 – 누락된 권한 부여...

CVE-2026-26416

CVE-2026-26416 권한 상승으로 이어지는 인가 우회 취약점 취약점 요약 Tata Consultancy Services TCS – Cognix Recon Client v3.0 에서 권한 상승 취약점이 확인되었습니다. 이 문제는 인증된 사용자가 조작된 API 요청을 통해 정의된 역할 경계를 넘어 권한을 상승시킬 수 있게 했습니다. 이 취약점은 역할 기반 접근 제어RBAC 로직 내 시행 부족에서 비롯되었으며, 예측 가능한 객체 식별자가 인가 검증 메커니즘을 우회할 수 있게 했습니다. 기술 분류 CWE CWE-269 – 부적...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

EUVD-2026-9840

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

EUVD-2026-9842

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

EUVD-2026-9841

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26418

The CVE-2026-26418 entry affects Tata Consultancy Services Cognix Recon Client v3.0. The vulnerability is a missing authentication and authorization flaw in the web API, enabling remote attackers to access application functionality over the network without restriction. According to the provided m...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

PT-2026-23478

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A lack of proper authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 enables remote attackers to access application...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

Tata Consultancy Services Cognix Recon Client 安全漏洞

Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from an access control flaw in the passwor...