{"id":"CVE-2026-86576","published":"2026-10-27T10:16:56.880","lastModified":"2026-10-27T15:00:49.240","description":"Heap-based Buffer Overflow Vulnerability in JP1 Products.\n\nThis issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-155/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in multiple JP1 products allows remote attackers to corrupt memory and potentially achieve code execution by sending specially crafted input over the network without authentication.","exploitability":"Exploitation is straightforward for remote attackers due to the network vector, lack of authentication, and low attack complexity; no user interaction is required.","blast_radius":"Successful exploitation could lead to full system compromise including data theft, unauthorized modification, and service disruption across affected JP1 management and job scheduling infrastructure.","remediation":"Upgrade JP1/Integrated Management 3 - Manager to 13-50-31 or later; upgrade JP1/Automatic Job Management System 3 components (Manager, Agent, Agent Minimal Edition) to 13-50-31 or later; upgrade JP1/Base to 12-50-54 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["heap-overflow","remote-exploit","no-auth","ics"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:03:21.787Z"}}