漏洞概述 漏洞编号: JVND8-2026-026849 CVE编号: CVE-2026-49975 CVSS严重程度: CVSS57 描述: 在Cosminexus HTTP Server中发现了一个漏洞。如果HTTP/2协议被禁用，此漏洞不适用。 影响范围 受影响产品: - Hitachi, Ltd. - Cosminexus HTTP Server Linux(x64) 11-70 - Cosminexus HTTP Server Linux(x64) 11-50-01 - 11-50-41 - Cosminexus HTTP Server Linux(x64) 11-20-23 - 11-20-41 - Cosminexus HTTP Server Windows(x64) 11-50 - 11-50-41 - Cosminexus HTTP Server Windows(x64) 11-20-22 - 11-20-41 - uCosminexus Application Server Linux(x64) 11-30 - 11-70 - uCosminexus Application Server Windows(x64) 11-30 - 11-70 - uCosminexus Application Server-R Linux(x64) 11-30 - 11-70 - uCosminexus Application Server-R Windows(x64) 11-30 - 11-70 - uCosminexus Developer Linux(x64) 11-30 - 11-70 - uCosminexus Developer Windows(x64) 11-30 - 11-70 - uCosminexus Primary Server Base Linux(x64) 11-30 - 11-70 - uCosminexus Primary Server Base Windows(x64) 11-30 - 11-70 - uCosminexus Service Architect Linux(x64) 11-30 - 11-70 - uCosminexus Service Architect Windows(x64) 11-30 - 11-70 - uCosminexus Service Platform Linux(x64) 11-30 - 11-70 - uCosminexus Service Platform Windows(x64) 11-30 - 11-70 修复方案 解决方案: 请参考“供应商信息”部分中的官方对策措施并采取适当行动。 供应商信息: - Hitachi, Ltd. - Hitachi Software Vulnerability Information: hitachi-sec-2026-128 其他信息 发布日期: 2026/08/04 首次发布日期: 2026/08/05 最后更新日期: 2026/08/05 备注 页面中未包含POC代码或利用代码。