This vulnerability (CVE-2026-71375) in Hitachi Cosminexus Component Container is due to improper restriction of XML external entity references (CWE-611). It affects various versions ranging from 09-00 through 11-70-01 with specific version boundaries detailed in the description. The CVSS 3.1 score is 7.4, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. No known exploits are reported in the wild, and no official remediation or patch has been documented as of the publication date.

An attacker can exploit this vulnerability remotely without privileges or user interaction to cause high confidentiality and availability impacts, such as denial of service or unauthorized disclosure of information through XML external entity processing. The vulnerability affects the confidentiality and availability of the affected systems but does not impact integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Hitachi advisories for updates. Until a patch is available, consider mitigating XML external entity processing risks by disabling or restricting external entity resolution in XML parsers if configurable.