CVE-2026-26418

CVE-2026-26418 Web API 中缺失的身份验证与授权 漏洞摘要 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 的 Web API 层中发现了一个缺失身份验证与授权的漏洞。 部分暴露的 API 端点未强制执行适当的身份验证和授权控制，允许在未经适当验证的情况下远程访问应用程序功能。 技术分类（CWE） CWE-306 – 关键功能缺少身份验证 CWE-862 – 缺少授权 受影响的端点 http://clientreconhost/reconciliations/ http://clientreconhost/Scheduler/...

CVE-2026-26417

CVE-2026-26417 密码重置功能中的访问控制缺陷 漏洞摘要 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 中发现了一个访问控制缺陷漏洞。 该问题允许已认证用户通过提交精心构造的 API 请求来重置任意用户账户的密码，而无需经过适当的授权验证。 该漏洞源于密码重置流程中所有权验证不足以及缺少授权检查。 技术分类（CWE） CWE-862 – 缺少授权 CWE-639 – 通过用户控制的密钥绕过授权 受影响端点 http://clientreconhost/trapeze-client/pwdMgmnt/resetPassword 供应商...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

EUVD-2026-9840

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

EUVD-2026-9842

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

EUVD-2026-9841

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26416

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26418

Tata Consultancy Services Cognix Recon Client v3.0 is vulnerable to a flaw where the Web API layer fails to enforce proper authentication and authorization controls. This missing validation (categorized under CWE-306 and CWE-862 ) allows remote attackers to access various application functions wi...

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

CVE-2026-26416: Improper Privilege Management

An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...

Tata Consultancy Services Cognix Recon Client 安全漏洞

Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from an access control flaw in the passwor...

PT-2026-23478

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A lack of proper authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 enables remote attackers to access application...