9.8
CVE-2026-71374
- EPSS 0.31%
- Veröffentlicht 08.09.2026 07:47:28
- Zuletzt bearbeitet 08.09.2026 14:18:34
- Erkennungen
Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerHitachi
≫
Produkt
Cosminexus Component Container
Default Statusunaffected
Version
11-70-01
Version <
11-70-03
Status
affected
Version
11-60
Version <
11-60-03
Status
affected
Version <=
11-50-03
Version
11-50
Status
affected
Version <=
11-40-03
Version
11-40
Status
affected
Version <=
11-30-08
Version
11-30
Status
affected
Version
11-20
Version <
11-20-10
Status
affected
Version <=
11-10-11
Version
11-10
Status
affected
Version
11-00
Version <
11-00-13
Status
affected
Version
09-87
Version <
09-87-10
Status
affected
Version
09-80
Version <
09-80-05
Status
affected
Version
09-70
Version <
09-70-28
Status
affected
Version <=
09-50-22
Version
09-50
Status
affected
Version <=
09-00-18
Version
09-00
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.239 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| hirt@hitachi.co.jp | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-130/index.html