Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-86577— Out-of-bounds Write Vulnerability in JP1 Products

Quick assessment

Affected
Hitachi JP1/Integrated Management 3 - Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

JP1 产品存在越界写入漏洞。 此问题影响以下产品版本： JP1/Integrated Management 3 - Manager：13-00 至 13-50-31 之前的版本； JP1/Automatic Job Management System 3 - Manager：13-00 至 13-50-31 之前的版本； JP1/Automatic Job Management System 3 - Agent：13-00 至 13-50-31 之前的版本； JP1/Automatic Job Managemen

CVSS 9.4 · Critical

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-86577

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Out-of-bounds Write Vulnerability in JP1 Products
Source: CVE Program / CVE List V5
Vulnerability Description
Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hitachi JP1/Integrated Management 3 - Manager 13-00 ~ 13-50-31 -
Hitachi JP1/Automatic Job Management System 3 - Manager 13-00 ~ 13-50-31 -
Hitachi JP1/Automatic Job Management System 3 - Agent 13-00 ~ 13-50-31 -
Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition 13-00 ~ 13-50-31 -
Hitachi JP1/Base 11-00 ~ 12-50-54 -

II. Public POCs for CVE-2026-86577

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-86577

请登录查看更多情报信息。

Other References for CVE-2026-86577 (1)

Same Patch Batch · Hitachi · 2026-10-27 · 19 CVEs total

CVE-2026-76939 9.8 CRITICAL Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-86574 9.8 CRITICAL Heap-based Buffer Overflow Vulnerability in JP1/Base
CVE-2026-82120 9.8 CRITICAL Heap-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-82119 9.8 CRITICAL OS Command Injection Vulnerability in HiRDB
CVE-2026-82118 9.8 CRITICAL Stack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-82117 9.8 CRITICAL Authentication Bypass by Spoofing Vulnerability in HiRDB
CVE-2026-82116 9.8 CRITICAL Missing Authentication for Critical Function Vulnerability in HiRDB
CVE-2026-76934 9.8 CRITICAL Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-76938 9.8 CRITICAL Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-76935 9.4 CRITICAL Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-76933 9.4 CRITICAL Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-76932 9.4 CRITICAL Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-82122 9.4 CRITICAL Stack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-76937 9.4 CRITICAL Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-76936 9.4 CRITICAL Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-86576 9.4 CRITICAL Heap-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-86575 9.4 CRITICAL Stack-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-82121 7.5 HIGH Origin Validation Error Vulnerability in HiRDB

IV. Related Vulnerabilities

Same product: JP1/Integrated Management 3 - Manager
Same vendor: Hitachi
Same weakness: CWE-787