Command Argument Injection Exposure in Cosminexus Component Container by Hitachi
CVE-2026-71377

9.8CRITICAL

Key Information:

Vendor

Hitachi
Status
Cosminexus Component Container
Vendor
CVE Published:
8 September 2026

What is CVE-2026-71377?

The command argument injection vulnerability in Cosminexus Component Container allows an attacker to manipulate command parameters. This can lead to unauthorized actions and potential compromise of the application, affecting numerous versions across the product line. Proper input validation and sanitization are crucial in mitigating the risk associated with this vulnerability.

Affected Version(s)

Cosminexus Component Container Windows 11-70-01 < 11-70-03

Cosminexus Component Container Windows 11-60 < 11-60-03

Cosminexus Component Container Windows 11-50 <= 11-50-03

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.