Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

JP1 products can let attackers execute code

CVE-2026-86575 · published today
Summary

Several JP1 management and job control components are vulnerable to a memory error that could let an attacker run their own programs on the server. This affects versions of JP1 Integrated Management, Automatic Job Management System (manager, agent, and minimal edition) and JP1 Base up to the listed releases. Update to the latest JP1 releases or apply the vendor’s patches as soon as possible.

What to do
  • Update hitachi jp1/integrated management 3 - manager to version 13-50-31.
  • Update hitachi jp1/automatic job management system 3 - manager to version 13-50-31.
  • Update hitachi jp1/automatic job management system 3 - agent to version 13-10-31.
  • Update hitachi jp1/automatic job management system 3 - agent minimal edition to version 13-50-31.
  • Update hitachi jp1/base to version 11-50-31.
Affected software
VendorProductAffected versions
hitachi jp1/integrated management 3 - manager < 13-50-31
Fix: upgrade to 13-50-31
hitachi jp1/automatic job management system 3 - manager < 13-50-31
Fix: upgrade to 13-50-31
hitachi jp1/automatic job management system 3 - agent < 13-50-31
Fix: upgrade to 13-10-31
hitachi jp1/automatic job management system 3 - agent minimal edition < 13-50-31
Fix: upgrade to 13-50-31
hitachi jp1/base < 12-50-54
Fix: upgrade to 11-50-31
Original advisory text
Stack-based Buffer Overflow Vulnerability in JP1 Products
Stack-based Buffer Overflow Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.4 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CVE-2026-86575 · NVD
CVE-2026-86575 · MITRE
Track software like this
Free during beta