{"vulnerability": "CVE-2026-7137", "sightings": [{"uuid": "c03f25f1-7326-4711-890e-f5abd28eb2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muyvemu4ay2r", "content": "Cosminexus Component Container\u306e\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306b\u5bfe\u3059\u308b\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-71374 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-08T11:14:06.314834Z"}, {"uuid": "7fa45c09-f87b-4adb-b267-ac4a92c1b135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71377", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjb562dv2t", "content": "CVE-2026-71377 - cosminexus component container\nVersions of the Cosmos Nexus Component Container listed are vulnerable to a flaw that lets an attacker force the software to run extra commands. This could let a bad\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hitachi #CVE #infosec", "creation_timestamp": "2026-09-08T17:10:04.612945Z"}, {"uuid": "0559e5a7-3803-41c3-985c-f886da0a80e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjb6pvkl2y", "content": "CVE-2026-71374 - cosminexus component container\nVersions of Cosminexus Component Container listed in the notice can be tricked into processing crafted data, which could cause the software to run unwanted commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hitachi #CVE #infosec", "creation_timestamp": "2026-09-08T17:10:05.262751Z"}, {"uuid": "d0f6dd8e-2fe9-4f12-abde-70691a08063c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71376", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzkwrtbhw2b", "content": "CVE-2026-71376\nSeveral older versions of Cosminexus Component Container can be tricked into executing system commands, which could let an attacker take control of the server. Update the software to the latest release to close\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-08T17:40:03.867486Z"}, {"uuid": "c9395d7f-c5fe-40b2-814d-1fb3c2e706da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71377", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117234599449065388", "content": "CVE-2026-71377: Critical (CVSS 9.8) command arg injection in Hitachi Cosminexus Component Container (09-00 to 11-70-01). Remote, no auth needed, complete compromise possible. No patch yet. Details: https://radar.offseq.com/threat/cve-2026-71377-cwe-88-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-c26949899f96a910 #OffSeq #CVE202671377 #Vuln #Infosec", "creation_timestamp": "2026-09-08T09:00:24.532587Z"}, {"uuid": "e8b90658-6e52-48e7-8f18-eee224cb001d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muynxaypsk2m", "content": "\ud83d\udd34 CVE-2026-71374 - Critical (9.8)\n\nDeserialization of untrusted data vulnerability in Cosminexus Component Container.\n\nThis issue af...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71374/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T09:01:21.753996Z"}, {"uuid": "848dd456-7121-4076-ba75-7a9b9cd12049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71377", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muynvmevpa2q", "content": "Critical 9.8 CVSS command injection found in Hitachi Cosminexus Component Container (09-00 to 11-70-01). No patch yet \u2014 monitor vendor updates, restrict network access. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-71377-cwe-88-improper-neutralization-of-argument-delimiters-in-a-command-argument-inj...", "creation_timestamp": "2026-09-08T09:00:26.457886Z"}, {"uuid": "c514eab4-3600-4d0a-a380-db3f8c45d465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrmuwvgd2g", "content": "\ud83d\udea8 CVE-2026-71374 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosmi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71374\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:07:08.005924Z"}, {"uuid": "48e46202-a5d9-4709-afe2-9799ef3ee735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71376", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyro5sxdc24", "content": "\ud83d\udea8 CVE-2026-71376 \u2014 CVSS 9.8 CRITICAL\n\nOS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Compone...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71376\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:08:03.497316Z"}, {"uuid": "68ba60fd-8dbb-4496-881b-8a3a8d558cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71377", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrofunrb2n", "content": "\ud83d\udea8 CVE-2026-71377 \u2014 CVSS 9.8 CRITICAL\n\nCommand Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus C...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71377\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:08:05.900598Z"}]}