CVE-2026-86577: Out-of-bounds Write Vulnerability in JP1 Products
Published Oct 27, 2026
·Updated
Out-of-bounds Write Vulnerability in JP1 Products.
This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Affected Software
5 affected components
Hitachi JP1/Integrated Management 3 - Manager>=13-00<13-50-31
Hitachi JP1/Automatic Job Management System 3 - Manager>=13-00<13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent>=13-00<13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition>=13-00<13-50-31
Hitachi JP1/Base>=11-00<12-50-54
Event History
Oct 27, 2026
CVE Published
via MITRE·09:37 AM
Data Sourced
via MITRE·09:37 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What would an attacker need to exploit this issue?
The CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.
2
What is the potential impact if exploitation succeeds?
The vulnerability is rated critical with a CVSS score of 9.4. It can result in high confidentiality and integrity impact, with low availability impact.