SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-71375

HIGH · CVSS 7.4 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Cosminexus Component Container is vulnerable due to improper restriction of XML external entity references, which could allow an attacker to exploit this flaw for unauthorized access to sensitive data or perform server-side request forgery (SSRF) attacks. Organizations using affected versions of this software should prioritize patching to mitigate potential data breaches and maintain system integrity.

CVE
CVE-2026-71375
Severity
HIGH
CVSS
7.4
EPSS
0.25%

Original NVD Description

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.