{"id":"CVE-2026-86574","kind":"vulnerability","aliases":["CVE-2026-86574"],"related":[],"title":"JP1/Base: heap buffer overflow may let an attacker run code","description":"Heap-based Buffer Overflow Vulnerability in JP1/Base.\n\nThis issue affects JP1/Base: from 11-00 before 12-50-54.","summary":"JP1/Base versions 11-00 through 12-50-53 contain a heap-based buffer overflow. The sources do not say what triggers it or what an attacker gets beyond the memory corruption itself.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-ops","hitachi","jp1","other"],"not_affected_if":["version-12-50-54-or-later"],"how_to_check":"- Check the installed JP1/Base version on each Hitachi JP1 host; the sources do not give the command or file to read it.\n- unknown for any other check.","fix":"- Move JP1/Base to `12-50-54` or later, per the affected range in the sources.\n- unknown for any interim setting or workaround.","status":"open","published_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","triaged_at":"2026-10-27T10:31:33+00:00","updated_at":"2026-10-27T10:31:33+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-27T10:31:33Z","model":"claude-haiku-5-5","output":{"fix":"- Move JP1/Base to `12-50-54` or later, per the affected range in the sources.\n- unknown for any interim setting or workaround.","reach":"unknown","title":"JP1/Base: heap buffer overflow may let an attacker run code","impact":"high","summary":"JP1/Base versions 11-00 through 12-50-53 contain a heap-based buffer overflow. The sources do not say what triggers it or what an attacker gets beyond the memory corruption itself.","category":"other","nicknames":[],"who_cares":["jp1","hitachi","enterprise-ops"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Heap corruption may allow code execution; the sources do not confirm.","analyst_note":"Find the vendor advisory for JP1/Base 12-50-54 to confirm the trigger, the reachable interface, and any workaround; the NVD entry gives only the affected range.","how_to_check":"- Check the installed JP1/Base version on each Hitachi JP1 host; the sources do not give the command or file to read it.\n- unknown for any other check.","needs_analyst":true,"not_affected_if":["version-12-50-54-or-later"],"who_is_affected":"Teams running JP1/Base from `11-00` before `12-50-54` are affected. The sources do not say which configurations or network exposure make a host reachable, so the rest is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000585,"input_tokens":3260,"output_tokens":518,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-00':25B,68C '-2026':12A,15A '-50':28B,71C '-53':29B '-54':72C '-86574':13A,16A '11':24B,67C '12':27B,70C 'affect':64C 'attack':8A,48B 'base':34B,56C 'beyond':50B 'buffer':3A,35B,57C 'code':10A 'contain':30B 'corrupt':53B 'cve':11A,14A 'enterpris':18B 'enterprise-op':17B 'get':49B 'heap':2A,33B,55C 'heap-bas':32B,54C 'hitachi':20B 'issu':63C 'jp1':21B 'jp1/base':1A,22B,61C,65C 'let':6A 'may':5A 'memori':52B 'op':19B 'overflow':4A,36B,58C 'run':9A 'say':41B 'sourc':38B 'trigger':43B 'version':23B 'vulner':59C","nicknames":[],"mitigations":[],"who_affected":"Teams running JP1/Base from `11-00` before `12-50-54` are affected. The sources do not say which configurations or network exposure make a host reachable, so the rest is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86574","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86574","severity":null,"published_at":"2026-10-27T10:16:56+00:00","modified_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","fetched_at":"2026-10-27T10:31:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}