Log in Start free

Vulnerability · Published Sep 8, 2026 · Assigned by Hitachi

CVE-2026-71375XXE Vulnerability in Cosminexus Component Container

High 7.4

In plain English

A high-severity XML external entity in Cosminexus Component Container from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.4%top 64.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.

Affected products (as reported)

VendorProductVersions
Hitachi Cosminexus Component Container 11-70-01 – before 11-70-0311-60 – before 11-60-0311-50 – through 11-50-0311-40 – through 11-40-0311-30 – through 11-30-0811-20 – before 11-20-1011-10 – through 11-10-1111-00 – before 11-00-13

Weakness: CWE-611 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

References