CVE-2026-86576: Heap-based Buffer Overflow Vulnerability in JP1 Products
Heap-based Buffer Overflow Vulnerability in JP1 Products.
This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, requires no privileges, and requires no user interaction. The attack complexity is rated low.
Which deployments should be prioritized for remediation?
Prioritize JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, JP1/Automatic Job Management System 3 - Agent, and Agent Minimal Edition versions from 13-00 through versions before 13-50-31. Also prioritize JP1/Base versions from 11-00 through versions before 12-50-54.
How can I determine whether an installed product is affected?
Check the installed product and version. The listed JP1 version 13 products are affected if they are 13-00 or later but earlier than 13-50-31; JP1/Base is affected if it is 11-00 or later but earlier than 12-50-54.
What is the potential security impact?
The supplied CVSS assessment rates confidentiality and integrity impact as high and availability impact as low. The overall severity is critical, with a score of 9.4.