CVE-2026-71375: falha de alta gravidade em Hitachi Cosminexus Component Container
XXE Vulnerability in Cosminexus Component Container
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 0.4%
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container.
This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Produtos afetados
Hitachi · Cosminexus Component ContainerCVEs relacionadas — Hitachi Cosminexus Component Container
No mesmo produto, das mais perigosas para as menos.
CVE-2026-71376CRITICALOS Command Injection Vulnerability in Cosminexus Component ContainerEPSS 1.8%CVE-2026-71377CRITICALCommand Argument Injection Vulnerability in Cosminexus Component ContainerEPSS 0.6%CVE-2026-71374CRITICALDeserialization of Untrusted Data Vulnerability in Cosminexus Component ContainerEPSS 0.6%CVE-2023-6814MEDIUMInformation Exposure Vulnerability in Cosminexus Component ContainerEPSS 0.2%