CVE-2026-86576 Heap-based Buffer Overflow Vulnerability in JP1 Products

Critical 9.4 Published 27 Oct 2026 Updated 27 Oct 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-86576?

CVE-2026-86576 is a critical vulnerability in Hitachi JP1/Automatic Job Management System 3 - Agent, published on 27 Oct 2026.

Official description

Heap-based Buffer Overflow Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.

Weakness: CWE-122

Which versions are affected by CVE-2026-86576?

How do I fix CVE-2026-86576?

No fix has been published for CVE-2026-86576 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-86576 being exploited?

There is no known exploitation of CVE-2026-86576 in the wild and no public exploit code.

Sources

Also known as GHSA-5rx8-vpg7-xhx2.