26.4 fixes close several access-control gaps, including recording visibility

What changed

The 26.4 Fixed Issues list, published October 27, includes RPT-56861, where clicking Reset in the Contact History report cleared restrictions and let agents see other agents' call recordings; CXDV-81756, where a configuration flag let CXone Dashboard users see data outside their assigned scope; AAD-49636, where the Admin API let view-only roles modify skill states; and CXWFM-91704, where unpublished schedules were visible to agents in the mobile app. The list also fixes ORC-53647, where global script variables did not replicate to standby servers and calls were refused after failover.

Why it matters

These are exposure and resilience issues rather than cosmetic bugs. Organizations with strict separation between agents, teams or business units may need to confirm whether anyone saw data or changed configuration they should not have while the defects were present.

CxCave practical context

Who should care

• Security and compliance teams
• Administrators
• WFM teams

Implementation considerations

Check your service notification for when 26.4 reaches your tenant. If agents use Contact History, users rely on restricted Dashboard access, or view-only API credentials exist, review change history and access around these issue IDs.

CxCave recommendation, not a vendor mandate unless explicitly stated.