9.4
CriticalCVSS 3.1 · from Hitachi
CVE-2026-86576
Heap-based Buffer Overflow Vulnerability in JP1 Products
JP1/Integrated Management 3 - Manager · Heap buffer overflow · CWE-122AffectedJP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, JP1/Automatic Job Management System 3 - Agent and 2 more
FixUpdate to 13-50-31, 13-50-31, 13-10-31, 12-50-54, 11-50-31 or newer
PublishedOct 27, 09:37 · Hitachi
ScoredOct 27 · 9.4 · Hitachi
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:06 UTC
What we know
No known exploitation. CISA KEV, checked 22:06 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
A successful attack can read data and change data. CVSS impact.
Description
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
From Hitachi
Affected and fixed versions
ProductAffectedFixed inJP1/Integrated Management 3 - Managerfrom 13-0013-50-31JP1/Automatic Job Management System 3 - Managerfrom 13-0013-50-31JP1/Automatic Job Management System 3 - Agentfrom 13-0013-50-31, 13-10-31JP1/Automatic Job Management System 3 - Agent Minimal Editionfrom 13-0013-50-31JP1/Basefrom 11-0012-50-54, 11-50-31
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known