<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T10:32:31.558008+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0f6dd8e-2fe9-4f12-abde-70691a08063c/export</id>
    <title>d0f6dd8e-2fe9-4f12-abde-70691a08063c</title>
    <updated>2026-09-17T10:32:31.586780+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0f6dd8e-2fe9-4f12-abde-70691a08063c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71376", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzkwrtbhw2b", "content": "CVE-2026-71376\nSeveral older versions of Cosminexus Component Container can be tricked into executing system commands, which could let an attacker take control of the server. Update the software to the latest release to close\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-08T17:40:03.867486Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0f6dd8e-2fe9-4f12-abde-70691a08063c/export"/>
    <published>2026-09-08T17:40:03.867486+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0559e5a7-3803-41c3-985c-f886da0a80e2/export</id>
    <title>0559e5a7-3803-41c3-985c-f886da0a80e2</title>
    <updated>2026-09-17T10:32:31.590886+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0559e5a7-3803-41c3-985c-f886da0a80e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjb6pvkl2y", "content": "CVE-2026-71374 - cosminexus component container\nVersions of Cosminexus Component Container listed in the notice can be tricked into processing crafted data, which could cause the software to run unwanted commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hitachi #CVE #infosec", "creation_timestamp": "2026-09-08T17:10:05.262751Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0559e5a7-3803-41c3-985c-f886da0a80e2/export"/>
    <published>2026-09-08T17:10:05.262751+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7fa45c09-f87b-4adb-b267-ac4a92c1b135/export</id>
    <title>7fa45c09-f87b-4adb-b267-ac4a92c1b135</title>
    <updated>2026-09-17T10:32:31.591282+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7fa45c09-f87b-4adb-b267-ac4a92c1b135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71377", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjb562dv2t", "content": "CVE-2026-71377 - cosminexus component container\nVersions of the Cosmos Nexus Component Container listed are vulnerable to a flaw that lets an attacker force the software to run extra commands. This could let a bad\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hitachi #CVE #infosec", "creation_timestamp": "2026-09-08T17:10:04.612945Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7fa45c09-f87b-4adb-b267-ac4a92c1b135/export"/>
    <published>2026-09-08T17:10:04.612945+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c03f25f1-7326-4711-890e-f5abd28eb2b1/export</id>
    <title>c03f25f1-7326-4711-890e-f5abd28eb2b1</title>
    <updated>2026-09-17T10:32:31.591579+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c03f25f1-7326-4711-890e-f5abd28eb2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muyvemu4ay2r", "content": "Cosminexus Component Container\u306e\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306b\u5bfe\u3059\u308b\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-71374 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-08T11:14:06.314834Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c03f25f1-7326-4711-890e-f5abd28eb2b1/export"/>
    <published>2026-09-08T11:14:06.314834+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/68ba60fd-8dbb-4496-881b-8a3a8d558cc5/export</id>
    <title>68ba60fd-8dbb-4496-881b-8a3a8d558cc5</title>
    <updated>2026-09-17T10:32:31.591830+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "68ba60fd-8dbb-4496-881b-8a3a8d558cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71377", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrofunrb2n", "content": "\ud83d\udea8 CVE-2026-71377 \u2014 CVSS 9.8 CRITICAL\n\nCommand Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus C...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71377\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:08:05.900598Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/68ba60fd-8dbb-4496-881b-8a3a8d558cc5/export"/>
    <published>2026-09-08T10:08:05.900598+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/48e46202-a5d9-4709-afe2-9799ef3ee735/export</id>
    <title>48e46202-a5d9-4709-afe2-9799ef3ee735</title>
    <updated>2026-09-17T10:32:31.592080+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "48e46202-a5d9-4709-afe2-9799ef3ee735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71376", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyro5sxdc24", "content": "\ud83d\udea8 CVE-2026-71376 \u2014 CVSS 9.8 CRITICAL\n\nOS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Compone...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71376\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:08:03.497316Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/48e46202-a5d9-4709-afe2-9799ef3ee735/export"/>
    <published>2026-09-08T10:08:03.497316+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c514eab4-3600-4d0a-a380-db3f8c45d465/export</id>
    <title>c514eab4-3600-4d0a-a380-db3f8c45d465</title>
    <updated>2026-09-17T10:32:31.592265+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c514eab4-3600-4d0a-a380-db3f8c45d465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrmuwvgd2g", "content": "\ud83d\udea8 CVE-2026-71374 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosmi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71374\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:07:08.005924Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c514eab4-3600-4d0a-a380-db3f8c45d465/export"/>
    <published>2026-09-08T10:07:08.005924+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e8b90658-6e52-48e7-8f18-eee224cb001d/export</id>
    <title>e8b90658-6e52-48e7-8f18-eee224cb001d</title>
    <updated>2026-09-17T10:32:31.592363+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e8b90658-6e52-48e7-8f18-eee224cb001d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71374", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muynxaypsk2m", "content": "\ud83d\udd34 CVE-2026-71374 - Critical (9.8)\n\nDeserialization of untrusted data vulnerability in Cosminexus Component Container.\n\nThis issue af...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71374/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T09:01:21.753996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e8b90658-6e52-48e7-8f18-eee224cb001d/export"/>
    <published>2026-09-08T09:01:21.753996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/848dd456-7121-4076-ba75-7a9b9cd12049/export</id>
    <title>848dd456-7121-4076-ba75-7a9b9cd12049</title>
    <updated>2026-09-17T10:32:31.592467+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "848dd456-7121-4076-ba75-7a9b9cd12049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71377", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muynvmevpa2q", "content": "Critical 9.8 CVSS command injection found in Hitachi Cosminexus Component Container (09-00 to 11-70-01). No patch yet \u2014 monitor vendor updates, restrict network access. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-71377-cwe-88-improper-neutralization-of-argument-delimiters-in-a-command-argument-inj...", "creation_timestamp": "2026-09-08T09:00:26.457886Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/848dd456-7121-4076-ba75-7a9b9cd12049/export"/>
    <published>2026-09-08T09:00:26.457886+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9395d7f-c5fe-40b2-814d-1fb3c2e706da/export</id>
    <title>c9395d7f-c5fe-40b2-814d-1fb3c2e706da</title>
    <updated>2026-09-17T10:32:31.592567+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9395d7f-c5fe-40b2-814d-1fb3c2e706da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71377", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117234599449065388", "content": "CVE-2026-71377: Critical (CVSS 9.8) command arg injection in Hitachi Cosminexus Component Container (09-00 to 11-70-01). Remote, no auth needed, complete compromise possible. No patch yet. Details: https://radar.offseq.com/threat/cve-2026-71377-cwe-88-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-c26949899f96a910 #OffSeq #CVE202671377 #Vuln #Infosec", "creation_timestamp": "2026-09-08T09:00:24.532587Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9395d7f-c5fe-40b2-814d-1fb3c2e706da/export"/>
    <published>2026-09-08T09:00:24.532587+00:00</published>
  </entry>
</feed>
