CVE-2026-71374: falha crítica em Hitachi Cosminexus Component Container
Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.6%
Deserialization of untrusted data vulnerability in Cosminexus Component Container.
This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hitachi · Cosminexus Component ContainerCVEs relacionadas — Hitachi Cosminexus Component Container
No mesmo produto, das mais perigosas para as menos.
CVE-2026-71376CRITICALOS Command Injection Vulnerability in Cosminexus Component ContainerEPSS 1.8%CVE-2026-71377CRITICALCommand Argument Injection Vulnerability in Cosminexus Component ContainerEPSS 0.6%CVE-2026-71375HIGHXXE Vulnerability in Cosminexus Component ContainerEPSS 0.4%CVE-2023-6814MEDIUMInformation Exposure Vulnerability in Cosminexus Component ContainerEPSS 0.2%