{"id":"CVE-2026-86577","published":"2026-10-27T10:16:56.993","lastModified":"2026-10-27T15:00:49.240","description":"Out-of-bounds Write Vulnerability in JP1 Products.\n\nThis issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-155/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Out-of-bounds write in JP1 products allows remote attackers to corrupt memory, potentially leading to system compromise or denial of service due to insufficient bounds checking during data handling.","exploitability":"Exploitation is highly likely due to network accessibility (AV:N), no authentication requirement (PR:N), and low complexity (AC:L); no user interaction needed (UI:N).","blast_radius":"Successful exploitation could enable full system compromise (C:H/I:H) with limited availability impact (A:L), affecting integrated management and job scheduling infrastructure across enterprise environments.","remediation":"Upgrade JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, Agent, Agent Minimal Edition, and JP1/Base to the fixed versions: 13-50-31 for the AJS3 components and 12-50-54 for JP1/Base.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["out-of-bounds-write","memory-corruption","remote-exploit","ics","jp1"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:03:29.976Z"}}