CVE-2026-86577
CriticalCVSS 9.4Summary
Out-of-bounds write vulnerability in Hitachi JP1 products. It affects JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 (Manager, Agent, Agent Minimal Edition), and JP1/Base in specific versions. The flaw can cause memory corruption due to writing beyond buffer boundaries.
Risk Assessment
Could allow an attacker to corrupt memory, leading to service crashes or arbitrary code execution in the context of the affected process. Impacts critical job management and infrastructure systems.
Recommendation
Update JP1 products to at least version 13-50-31 (JP1/Base to 12-50-54) per vendor guidance. Until patched, restrict network access to JP1 services.
Other vulnerabilities in JP1
See all- CVE-2026-86576Critical
Heap-based buffer overflow vulnerability in Hitachi JP1 products. It affects JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 (Manager, Agent, Agent Minimal Edition), and JP1/Base in specified version ranges. The flaw can corrupt heap memory.
- CVE-2026-86575Critical
Stack-based buffer overflow vulnerability in Hitachi JP1 products. It affects JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 (Manager, Agent, Agent Minimal Edition), and JP1/Base in specific versions. The flaw can corrupt stack memory and potentially lead to code execution.
Original NVD description (English source)
Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS