CVE-2026-71375
XXE Vulnerability in Cosminexus Component Container
CVSS Score
7.4
EPSS Score
0.0%
EPSS Percentile
0th
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
| CWE | CWE-611 |
| Vendor | hitachi |
| Product | cosminexus component container |
| Published | Sep 8, 2026 |
| Last Updated | Sep 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for hitachi cosminexus component container
Be the first to know when new high vulnerabilities affecting hitachi cosminexus component container are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Affected Versions
Hitachi / Cosminexus Component Container
11-70-01 < 11-70-03 11-60 < 11-60-03 11-50 ≤ 11-50-03 11-40 ≤ 11-40-03 11-30 ≤ 11-30-08 11-20 < 11-20-10 11-10 ≤ 11-10-11 11-00 < 11-00-13 09-87 < 09-87-10 09-80 < 09-80-05 09-70 < 09-70-28 09-50 ≤ 09-50-22 09-00 ≤ 09-00-18