Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

CVE-2026-86574: JP1/Base may allow memory corruption

CVE-2026-86574 · published 8 days ago
Summary

Versions of Hitachi JP1/Base prior to 12‑50‑54 can be tricked into overwriting data in memory, which could let an attacker take control of the system. This risk is caused by a flaw in how the program handles data stored on the heap. Upgrade to JP1/Base 12‑50‑54 or later, or apply any patches provided by Hitachi, to eliminate the issue.

What to do
  • Update hitachi jp1/base to version 11-50-36.
Affected software
VendorProductAffected versions
hitachi jp1/base < 12-50-54
Fix: upgrade to 11-50-36
Original advisory text
Heap-based Buffer Overflow Vulnerability in JP1/Base
Heap-based Buffer Overflow Vulnerability in JP1/Base.

This issue affects JP1/Base: from 11-00 before 12-50-54.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published27 Oct 2026
Updated4 Nov 2026
First seen27 Oct 2026
Sources
CVE-2026-86574 · MITRE
Track software like this
Free during beta