Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Hitachi Cosminexus Component Container can be tricked to run code

CVE-2026-71374 · published 1 month ago
Summary

Versions of the Hitachi Cosminexus Component Container listed in the advisory can be fooled into processing malicious data, which may let an attacker execute unwanted commands on the server. This could lead to unauthorized access or disruption of services. Update to the latest released version or apply the vendor’s recommended patches to protect your system.

What to do
  • Update hitachi cosminexus component container to version 11-70-03.
Affected software
VendorProductAffected versions
hitachi cosminexus component container < 11-70-03
Fix: upgrade to 11-70-03
Original advisory text
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, fro...
Deserialization of untrusted data vulnerability in Cosminexus Component Container.

This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published8 Sep 2026
Updated11 Oct 2026
First seen8 Sep 2026
Sources
CVE-2026-71374 · NVD
CVE-2026-71374 · MITRE
Track software like this
Free during beta