CVE-2026-86576
Received Received - Intake

Heap-based Buffer Overflow in JP1 Products

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: Hitachi, Ltd.

Description
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-86576
EUVD
EUVD-2026-110652

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-86576 is a heap-based buffer overflow vulnerability in Hitachi JP1 products. It allows attackers to execute arbitrary code remotely without authentication by sending specially crafted data. The flaw exists in multiple components including JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3, and JP1/Base across various versions.

Impact Analysis

This vulnerability can lead to complete system compromise, allowing attackers to gain control over affected systems. It may result in data theft, unauthorized system access, or disruption of services. Since it is remotely exploitable without authentication, any exposed system running vulnerable JP1 software is at high risk.

Mitigation Strategies

Upgrade affected JP1 products to fixed versions: JP1/Base to 12-50-54 or 11-50-36, JP1/Integrated Management 3 - Manager to 13-50-31, and other JP1 components to their respective patched versions as specified by Hitachi.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86576. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart