CVE-2026-86576

Summary

A heap-based buffer overflow in multiple JP1 products allows remote attackers to corrupt memory and potentially achieve code execution by sending specially crafted input over the network without authentication.

Exploitability

Exploitation is straightforward for remote attackers due to the network vector, lack of authentication, and low attack complexity; no user interaction is required.

Blast radius

Successful exploitation could lead to full system compromise including data theft, unauthorized modification, and service disruption across affected JP1 management and job scheduling infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade JP1/Integrated Management 3 - Manager to 13-50-31 or later; upgrade JP1/Automatic Job Management System 3 components (Manager, Agent, Agent Minimal Edition) to 13-50-31 or later; upgrade JP1/Base to 12-50-54 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.