Description
Stack-based Buffer Overflow Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Published: 2026-10-27
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

Stack-based buffer overflow allows attackers to overwrite control data on the stack, potentially executing arbitrary code with the privileges of the process. This flaw falls under CWE‑121 and can lead to unauthorized code execution, confidentiality, integrity, or availability compromise. It may affect any system running the vulnerable JP1 components.

Affected Systems

Affected vendors include Hitachi JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, JP1/Automatic Job Management System 3 - Agent, JP1/Automatic Job Management System 3 - Agent Minimal Edition, and JP1/Base. Versions prior to 13‑50‑31 of the first four products, and prior to 12‑50‑54 of JP1/Base, are vulnerable.

Risk and Exploitability

The CVSS score is 9.4, indicating critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attack vector is not explicitly stated; it is inferred that external exploitation could be possible if the affected services are exposed to an untrusted environment, or local exploitation if a privileged user can trigger the overflow. No official patch or workaround was provided in the advisory.

Generated by OpenCVE AI on October 27, 2026 at 10:26 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update all JP1 servers to versions that include the fix – at least 13‑50‑31 for JP1/Integrated/Automatic Job Management System components and 12‑50‑54 for JP1/Base.
  • If an update is not immediately possible, isolate the affected services from external networks and restrict access to trusted hosts only.
  • Continuously monitor logs for signs of stack corruption or anomalous activity and perform periodic security scans to detect exploitation attempts.

Generated by OpenCVE AI on October 27, 2026 at 10:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Title Stack-based Buffer Overflow Vulnerability in JP1 Products
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Hitachi

Published:

Updated: 2026-10-27T09:37:10.239Z

Reserved: 2026-09-08T05:39:06.584Z

Link: CVE-2026-86575

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T10:16:56.760

Modified: 2026-10-27T10:16:56.760

Link: CVE-2026-86575

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T10:30:11Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow