7.4
High
CVE-2026-71375 Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container
Description
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cosminexus Component Container 11 | 11-00 → < 11-70-03 | 11-70-03 |
| Cosminexus Component Container 09 | 09-00 → < 09-87-10 | 09-87-10 |
Other CVEs of Cosminexus Component Container
The 5 CVEs of Cosminexus Component Container →
CVE-2026-71377
Command Argument Injection Vulnerability in Cosminexus Component Container
9.8
Critical
CVE-2026-71376
OS command injection vulnerability in Cosminexus Component Container
9.8
Critical
CVE-2026-71374
Deserialization of untrusted data vulnerability in Cosminexus Component Container
9.8
Critical
CVE-2023-6814
Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local…
5.6
Medium