Hitachi Cosminexus HTTP Server Vulnerability Advisory (CVE-2026-49975)

Vulnerability Overview Vulnerability ID: JVND8-2026-026849 CVE ID: CVE-2026-49975 CVSS Severity: CVSS57 Description: A vulnerability was discovered in Cosminexus HTTP Server. This vulnerability is not applicable if HTTP/2 protocol is disabled. Affected Products Affected Products: - Hitachi, Ltd. - Cosminexus HTTP Server Linux(x64) 11-70 - Cosminexus HTTP Server Linux(x64) 11-50-01 - 11-50-41 - Cosminexus HTTP Server Linux(x64) 11-20-23 - 11-20-41 - Cosminexus HTTP Server Windows(x64) 11-50 - 11-50-41 - Cosminexus HTTP Server Windows(x64) 11-20-22 - 11-20-41 - uCosminexus Application Server Linux(x64) 11-30 - 11-70 - uCosminexus Application Server Windows(x64) 11-30 - 11-70 - uCosminexus Application Server-R Linux(x64) 11-30 - 11-70 - uCosminexus Application Server-R Windows(x64) 11-30 - 11-70 - uCosminexus Developer Linux(x64) 11-30 - 11-70 - uCosminexus Developer Windows(x64) 11-30 - 11-70 - uCosminexus Primary Server Base Linux(x64) 11-30 - 11-70 - uCosminexus Primary Server Base Windows(x64) 11-30 - 11-70 - uCosminexus Service Architect Linux(x64) 11-30 - 11-70 - uCosminexus Service Architect Windows(x64) 11-30 - 11-70 - uCosminexus Service Platform Linux(x64) 11-30 - 11-70 - uCosminexus Service Platform Windows(x64) 11-30 - 11-70 Remediation Solution: Refer to the official countermeasures in the "Vendor Information" section and take appropriate action. Vendor Information: - Hitachi, Ltd. - Hitachi Software Vulnerability Information: hitachi-sec-2026-128 Additional Information Publication Date: 2026/08/04 First Publication Date: 2026/08/05 Last Updated: 2026/08/05 Remarks No POC (Proof of Concept) code or exploit code is included in the document.

Goal Reached Thanks to every supporter — we hit 100%!

Hitachi Cosminexus HTTP Server Vulnerability Advisory (CVE-2026-49975)