CVE-2026-71374

Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-130/index.html

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-08 08:17

Updated : 2026-09-08 14:18

NVD link : CVE-2026-71374

Mitre link : CVE-2026-71374

CVE.ORG link : CVE-2026-71374

JSON object : View

Products Affected

No product.

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2026-71374", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71374", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-09-08T12:26:02.914106Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "hirt@hitachi.co.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "hirt@hitachi.co.jp", "affectedData": [{"vendor": "Hitachi", "product": "Cosminexus Component Container", "versions": [{"status": "affected", "changes": [{"at": "11-70-03", "status": "unaffected"}], "version": "11-70-01", "lessThan": "11-70-03", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "11-60-03", "status": "unaffected"}], "version": "11-60", "lessThan": "11-60-03", "versionType": "custom"}, {"status": "affected", "version": "11-50", "versionType": "custom", "lessThanOrEqual": "11-50-03"}, {"status": "affected", "version": "11-40", "versionType": "custom", "lessThanOrEqual": "11-40-03"}, {"status": "affected", "version": "11-30", "versionType": "custom", "lessThanOrEqual": "11-30-08"}, {"status": "affected", "changes": [{"at": "11-20-10", "status": "unaffected"}], "version": "11-20", "lessThan": "11-20-10", "versionType": "custom"}, {"status": "affected", "version": "11-10", "versionType": "custom", "lessThanOrEqual": "11-10-11"}, {"status": "affected", "changes": [{"at": "11-00-13", "status": "unaffected"}], "version": "11-00", "lessThan": "11-00-13", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "09-87-10", "status": "unaffected"}], "version": "09-87", "lessThan": "09-87-10", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "09-80-05", "status": "unaffected"}], "version": "09-80", "lessThan": "09-80-05", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "09-70-28", "status": "unaffected"}], "version": "09-70", "lessThan": "09-70-28", "versionType": "custom"}, {"status": "affected", "version": "09-50", "versionType": "custom", "lessThanOrEqual": "09-50-22"}, {"status": "affected", "version": "09-00", "versionType": "custom", "lessThanOrEqual": "09-00-18"}], "platforms": ["Windows", "Linux", "AIX"], "defaultStatus": "unaffected"}]}], "published": "2026-09-08T08:17:11.563", "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-130/index.html", "source": "hirt@hitachi.co.jp"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "hirt@hitachi.co.jp", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "Deserialization of untrusted data vulnerability in Cosminexus Component Container.\n\nThis issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18."}], "lastModified": "2026-09-08T14:18:34.130", "sourceIdentifier": "hirt@hitachi.co.jp"}