Hitachi JP1: Heap-based buffer overflow (CVE-2026-86576)
A heap-based buffer overflow vulnerability has been identified in multiple Hitachi JP1 products.
CVE search metadata
CVE search record: CVE-2026-86576. Severity: critical. CVSS: 9.4. KEV: no. Product: JP1/Integrated Management 3 - Manager (13-00 before 13-50-31), JP1/Automatic Job Management System 3 - Manager (13-00 before 13-50-31), JP1/Automatic Job Management System 3 - Agent (13-00 before 13-50-31), JP1/Automatic Job Management System 3 - Agent Minimal Edition (13-00 before 13-50-31), JP1/Base (11-00 before 12-50-54). Brief: Hitachi JP1: Heap-based buffer overflow (CVE-2026-86576). Brief link: https://feed.craftedsignal.io/briefs/2026-10-hitachi-jp1-overflow/
Triage facts
Revision 1- Applicability
- JP1/Integrated Management 3 - Manager (13-00 before 13-50-31), JP1/Automatic Job Management System 3 - Manager (13-00 before 13-50-31) +3
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 27, 10:58 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-86576 is a heap-based buffer overflow vulnerability affecting specific versions of Hitachi JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 (Manager, Agent, and Agent Minimal Edition), and JP1/Base. The vulnerability has a CVSS v3.1 base score of 9.4.