Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Hitachi Cosminexus Component Container allows command injection

CVE-2026-71377 · published 1 month ago
Summary

Versions of the Hitachi Cosminexus Component Container listed are vulnerable to a flaw that lets an attacker add malicious commands to what the software runs. This could let the attacker execute unwanted actions on the server hosting the container. Update to the latest released version or apply the vendor's patch as soon as possible.

What to do
  • Update hitachi cosminexus component container to version 11-70-03.
Affected software
VendorProductAffected versions
hitachi cosminexus component container < 11-70-03
Fix: upgrade to 11-70-03
Original advisory text
Command Argument Injection Vulnerability in Cosminexus Component Container
Command Argument Injection Vulnerability in Cosminexus Component Container.

This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 through 11-00-12, from 09-87 before 09-87-10, from 09-80 through 09-80-04, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Timeline
Published8 Sep 2026
Updated11 Oct 2026
First seen8 Sep 2026
Sources
CVE-2026-71377 · NVD
CVE-2026-71377 · MITRE
Track software like this
Free during beta