Riskcovery

CVE-2026-71376

OS Command Injection Vulnerability in Cosminexus Component Container

State
Published
Severity
9.8 Critical
Published
Sep 8, 2026
Updated
Sep 8, 2026
Reserved
Aug 6, 2026

Read the record on cve.org

Description

OS command injection vulnerability in Cosminexus Component Container.

This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHitachi

Weaknesses

  • CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')

Affected Products

ProductVersions
Cosminexus Component ContainerHitachi
  • 11-70-01 to before 11-70-03Affectedfrom 11-70-03Not affected
  • 11-60 to before 11-60-03Affectedfrom 11-60-03Not affected
  • 11-50 through 11-50-03Affected
  • 11-40 through 11-40-03Affected
  • 11-30 through 11-30-08Affected
  • 11-20 to before 11-20-10Affectedfrom 11-20-10Not affected
  • 11-10 through 11-10-11Affected
  • 11-00 to before 11-00-13Affectedfrom 11-00-13Not affected
  • 09-87 to before 09-87-10Affectedfrom 09-87-10Not affected
  • 09-80 to before 09-80-05Affectedfrom 09-80-05Not affected
  • 09-70 to before 09-70-28Affectedfrom 09-70-28Not affected
  • 09-50 through 09-50-22Affected
  • 09-00 through 09-00-18Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.