Vulnerabilities

TI-2026-50017 CVE-2026-71376 · GHSA-84vf-8fgj-wv3v

OS Command Injection Vulnerability in Cosminexus Component Container

MEDIUM 52

OS command injection vulnerability in Cosminexus Component Container.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2026-09-08 Fixed in 11-70-03, 11-60-03 +5 CWE-78

TI-2026-50016 CVE-2026-71375 · GHSA-44fm-q5rc-wxj2

LOW 33

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00406 Published 2026-09-08 Fixed in 11-70-03, 11-60-03 +5 CWE-611

TI-2026-50015 CVE-2026-71374 · GHSA-6jc2-v95v-m7rh

MEDIUM 50

Deserialization of untrusted data vulnerability in Cosminexus Component Container.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-09-08 Fixed in 11-70-03, 11-60-03 +5 CWE-502