CVE-2026-86577 Out-of-bounds Write Vulnerability in JP1 Products

Critical 9.4 Published 27 Oct 2026 Updated 27 Oct 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-86577?

CVE-2026-86577 is a critical vulnerability in Hitachi JP1/Automatic Job Management System 3 - Agent, published on 27 Oct 2026.

Official description

Out-of-bounds Write Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.

Weakness: CWE-787

Which versions are affected by CVE-2026-86577?

How do I fix CVE-2026-86577?

No fix has been published for CVE-2026-86577 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-86577 being exploited?

There is no known exploitation of CVE-2026-86577 in the wild and no public exploit code.

Sources

Also known as GHSA-c6xv-292f-8jj6.