CVE-2026-86577 Details
Description
Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
A critical out-of-bounds write vulnerability has been identified in multiple JP1 products, including JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, JP1/Automatic Job Management System 3 - Agent, JP1/Automatic Job Management System 3 - Agent Minimal Edition, and JP1/Base. The vulnerability affects several different versions and ranges, with the exception of JP1/Base, which is vulnerable from version 11-00 prior to 12-50-54.
Users are advised to upgrade to JP1/Integrated Management 3 - Manager version 13-50-31, JP1/Automatic Job Management System 3 - Manager version 13-50-31, JP1/Automatic Job Management System 3 - Agent version 13-50-31 (or 13-10-31 for AIX), JP1/Automatic Job Management System 3 - Agent Minimal Edition version 13-50-31, and JP1/Base versions 12-50-54 or 11-50-36.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-155/index.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Hitachi JP1/Integrated Management 3 | >= 13-50, <= 13-50-01 >= 13-11, <= 13-11-03 >= 13-10, <= 13-10-05 >= 13-01, <= 13-01-05 >= 13-00, <= 13-00-07 |
CPE
Remediation
| |
| Hitachi JP1/Automatic Job Management System 3 | >= 13-50, <= 13-50-04 >= 13-10, <= 13-10-06 >= 13-00, <= 13-00-09 |
CPE
Remediation
| |
| Hitachi JP1/Base | >= 12-50, <= 12-50-53 >= 12-10, <= 12-10-10 >= 12-00, <= 12-00-34 >= 11-50, <= 11-50-35 >= 11-10, <= 11-10-32 >= 11-00, <= 11-00-31 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |