Deserialization Vulnerability in Cosminexus Component Container by Hitachi
CVE-2026-71374

9.8CRITICAL

Key Information:

Vendor

Hitachi
Status
Cosminexus Component Container
Vendor
CVE Published:
8 September 2026

What is CVE-2026-71374?

A deserialization of untrusted data vulnerability exists in the Cosminexus Component Container from Hitachi. This security flaw could allow an attacker to manipulate data used by the server, potentially leading to arbitrary code execution or data corruption. The issue affects multiple versions of the product, exposing a wide range of installations to risks from untrusted data input.

Affected Version(s)

Cosminexus Component Container Windows 11-70-01 < 11-70-03

Cosminexus Component Container Windows 11-60 < 11-60-03

Cosminexus Component Container Windows 11-50 <= 11-50-03

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.