Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Latest critical vulnerabilities

Published CVEs whose headline CVSS score — from the CNA or from NVD — is 9.0 or more, newest first.

Updated : CVE List (cvelistV5) : NVD (fkie-cad mirror) :

CVELibrary / product — vulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-114358Radius Synergies Radius Xenia M2M Platform VersionSQL Injection Vulnerability in Radius Xenia M2M PlatformCRITICAL 9.3
CVE-2026-109516guruteam Bot for Telegram on WooCommerce ≤ 1.3.0Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Fo…CRITICAL 9.8
CVE-2026-42922frangoteam Frangoteam 1.3.2-2809A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP requestCRITICAL 9.8
CVE-2026-66088Apereo Foundation openEQUELLA < 2026.1Unrestricted Command Execution via system.executeCRITICAL 9.4
CVE-2026-118579D-Link DIR-505 1.10B02D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorCRITICAL 9.3
CVE-2026-61567WWBN AVideo-Encoder < 8.1.0AVideo-Encoder: unauthenticated command execution through streamer login trustCRITICAL 10.0
CVE-2026-61564WWBN AVideo-Encoder < 8.1.0AVideo-Encoder: unauthenticated installer PHP code injectionCRITICAL 10.0
CVE-2026-118690SignalK signalk-server < 2.33.0Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogsCRITICAL 9.3
CVE-2026-117574Red Hat Red Hat OpenShift AI (RHOAI)
Red Hat Red Hat OpenShift AI (RHOAI)		Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-proc…CRITICAL 9.1
CVE-2026-63190fearlessgeekmedia FearlessCMS < 0.1.4FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSSCRITICAL 9.4
CVE-2026-118264github.com/labstack/echo/v4 Go 4.0.0 – < 4.16.1
github.com/labstack/echo/v5 Go 5.0.0 – < 5.4.1		Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsCRITICAL 9.1
CVE-2026-118633Sophos SG UTM ≤ 9.724A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) afterCRITICAL 9.2
CVE-2026-103409Juniper Networks Session Smart Router < 7.0.5 ; 7.1.0 – < 7.1.7 ; 7.2.0 – < 7.2.3Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedCRITICAL 9.8
CVE-2026-103406Juniper Networks Session Smart Conductor < 7.0.5 ; 7.1.0 – < 7.1.7 ; 7.2.0 – < 7.2.3Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.CRITICAL 9.8
CVE-2026-44179com.xwiki.pro/xwiki-pro-macros Maven 1.13 – < 1.14.5XWiki Pro Macros: excerpt-include title and content injection executes codeCRITICAL 9.9
CVE-2026-115968Ultimate Member Ultimate Member ≤ 2.13.1WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerabilityCRITICAL 9.8
CVE-2026-105420Wing Soft Technology Wing FTP Server < 8.2.6Path Traversal in Wing WFTP Server leading to Remote Code ExecutionCRITICAL 9.4
CVE-2026-111411Aman FunnelKit Automations ≤ 3.8.5.2WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerabilityCRITICAL 9.3
CVE-2026-115607Crowd Favorite DXP ToolKit ≤ 2.0.1WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerabilityCRITICAL 9.3
CVE-2026-115904topluyo App < 2026.9.2410Topluyo Desktop for Linux has an OS Command Injection issueCRITICAL 9.6
CVE-2026-67074HCL Software BigFix AEX v13.0.0.1HCL BigFix AEX is affected by multiple security vulnerabilities.CRITICAL 9.1
CVE-2026-114278Eclipse Foundation Eclipse Che 7.0.0 – 7.122.0Unauthenticated Command Injection via kubeconfig Username in che-machine-execCRITICAL 9.8
CVE-2026-103792Dell PowerProtect Data Domain Management Center < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1CRITICAL 9.6
CVE-2026-103799Dell PowerProtect Data Domain Management Center < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1CRITICAL 9.6
CVE-2026-112197Tactis NoviGest Desktop App NoviGest Desktop App prior to version 8.0.0-300Missing Authentication for Critical Function in Tactis' NoviGest Desktop AppCRITICAL 9.4
CVE-2026-103780Dell PowerProtect Data Domain < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reCRITICAL 9.8
CVE-2026-86384Dell PowerProtect Data Domain < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reCRITICAL 9.80.5 %
CVE-2026-14571Futurum Software Futurum Software User Authentication Module < May 2026SQL injection (SQLi) in the user authentication module of Futurum SoftwareCRITICAL 9.10.4 %
CVE-2026-86397Dell PowerProtect Data Domain < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reCRITICAL 9.80.3 %
CVE-2026-86400Dell PowerProtect Data Domain < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reCRITICAL 9.80.9 %
CVE-2026-90717Dell PowerProtect Data Domain Management Center < 8.9.0.0 or later ; < 7.13.1.90 or later ; < 8.3.1.50 or later ; …Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1CRITICAL 9.10.2 %
CVE-2026-109218kleor Contact Manager ≤ 9.1.2Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist BypassCRITICAL 9.80.6 %
CVE-2026-103688Unknown Checkout Files Upload for WooCommerce < 2.4.0Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File UploadCRITICAL 9.80.2 %
CVE-2026-104383EagleCloud Aquila ≤ 2.6.7.2Code injection in EagleCloud Aquila on-premises versionCRITICAL 9.40.4 %
CVE-2026-84999Pie Register Pie Register Premium ≤ 3.8.4.0Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX HandlerCRITICAL 9.80.5 %
CVE-2026-118375ggml-org llama.cpp b8841 – < b11865llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()CRITICAL 9.20.4 %
CVE-2026-106013artbees Jupiter X Core ≤ 4.61.0Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier ParameterCRITICAL 9.80.6 %
CVE-2026-110879FasterXML jackson-databind 2.10.0 – < 2.18.12 ; 2.19.0 – < 2.21.8 ; 2.22.0 – < 2.22.4
FasterXML jackson-databind 3.0.0 – < 3.1.8 ; 3.2.0 – < 3.2.4		jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation…CRITICAL 9.81.2 %
CVE-2026-118312Google Chrome 156.0.8078.73 – < 156.0.8078.73Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside tCRITICAL 9.60.2 %
CVE-2026-118309Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitCRITICAL 9.60.2 %
CVE-2026-118342Google Chrome 156.0.8078.73 – < 156.0.8078.73Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsiCRITICAL 9.60.2 %
CVE-2026-118310Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arCRITICAL 9.60.2 %
CVE-2026-118308Google Chrome 156.0.8078.73 – < 156.0.8078.73Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the saCRITICAL 9.60.2 %
CVE-2026-118316Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsCRITICAL 9.60.2 %
CVE-2026-118332Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary CRITICAL 9.60.2 %
CVE-2026-118355Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary codeCRITICAL 9.60.2 %
CVE-2026-118340Google Chrome 156.0.8078.73 – < 156.0.8078.73Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside thCRITICAL 9.60.2 %
CVE-2026-118321Google Chrome 156.0.8078.73 – < 156.0.8078.73Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbCRITICAL 9.60.2 %
CVE-2026-118305Google Chrome 156.0.8078.73 – < 156.0.8078.73Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsidCRITICAL 9.60.2 %
CVE-2026-118306Google Chrome 156.0.8078.73 – < 156.0.8078.73Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsCRITICAL 9.60.2 %
CVE-2026-58256JeromeDevome GRR < 4.5.0GRR vulnerable to Remote Code Execution Via PHP Code InjectionCRITICAL 9.10.6 %
CVE-2026-116692mlflow PyPI 3.12.0rc0 – < 3.17.0MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact m…CRITICAL 9.80.7 %
CVE-2026-112352Sunhillo Corporation SureLine 8.0.0 – < 9.1.5Sunhillo SureLine Authentication Bypass via Session CookieCRITICAL 9.11.3 %
CVE-2026-105780Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)CRITICAL 9.90.5 %
CVE-2026-104353Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CRITICAL 9.91.3 %
CVE-2026-105489Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CRITICAL 9.90.5 %
CVE-2026-105781Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CRITICAL 10.00.5 %
CVE-2026-105779Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CRITICAL 9.10.3 %
CVE-2026-104354Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CRITICAL 9.10.5 %
CVE-2026-104351Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)CRITICAL 9.90.6 %
CVE-2026-104350Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)CRITICAL 9.30.6 %
CVE-2026-108015HCLSoftware Notes Client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1eMudhra Compromised Certificate vulnerability impacts HCL Notes ClientCRITICAL 9.10.1 %
CVE-2026-114595The EPICS Community EPICS Base ≤ 7.0.10Integer overflow or wraparound in EPICS BaseCRITICAL 9.30.5 %
CVE-2026-48360Adobe Adobe Connect Desktop App ≤ 2026.8.51 (Win), 2026.08.45 (Mac Silicon), 2026.01.39 (Mac Intel)
Adobe Adobe Connect Android Mobile App ≤ 4.4		Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)CRITICAL 9.60.4 %
CVE-2026-108014HCLSoftware Domino Server <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1eMudhra Compromised Certificate vulnerability impacts HCL Domino ServerCRITICAL 9.10.1 %
CVE-2026-108142Veeam Backup and Replication 13.0 – < 13.0.3 ; 13.1 – < 13.1.2A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.CRITICAL 9.10.4 %
CVE-2026-106076Veeam Backup for Microsoft 365 8.0 – 8.5.0.1014A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam BackuCRITICAL 9.00.4 %
CVE-2026-116863Tribulant Software Newsletters ≤ 4.18.2WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerabilityCRITICAL 9.60.2 %
CVE-2026-90465WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Missing Authentication in FireCluster Sync Allows Privilege EscalationCRITICAL 9.40.2 %
CVE-2026-112710WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionCRITICAL 9.20.4 %
CVE-2026-112709WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionCRITICAL 9.20.4 %
CVE-2026-103593WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionCRITICAL 9.10.1 %
CVE-2026-93866WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteCRITICAL 9.20.4 %
CVE-2026-93865WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionCRITICAL 9.20.5 %
CVE-2026-93857WatchGuard Fireware OS 2025.1 – < 2026.4 ; 12.0 – < 12.12.4
WatchGuard Fireware OS 12.0 – < 12.5.22		Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionCRITICAL 9.20.5 %
CVE-2026-103594WatchGuard Fireware OS 2026.2 – < 2026.4 ; 12.12 – < 12.12.4Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionCRITICAL 9.50.4 %
CVE-2026-117603spesmilo electrum < 4.7.2Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit BypassCRITICAL 9.30.2 %
CVE-2026-117601spesmilo electrum < 4.8.3Electrum before 4.8.3 Missing Signature Verification of Mempool TransactionsCRITICAL 9.30.2 %
CVE-2026-117564buqiyuan nest-admin < 1.0.1nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT SecretCRITICAL 9.30.6 %
CVE-2026-65145NVIDIA NeMo Agent Toolkit 1.0 to 1.8.0NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might leaCRITICAL 10.00.5 %
CVE-2026-115216Eclipse Foundation Eclipse ioFog 3.8.0 – < 3.9.2Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentialsCRITICAL 9.10.2 %
CVE-2026-112362@fastify/express @fastify/express 4.0.5 – < 4.0.9@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targetsCRITICAL 9.10.4 %
CVE-2026-117532redaxo core 5.3.0 – < 5.21.4REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History PluginCRITICAL 9.30.7 %
CVE-2026-82117Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		Authentication Bypass by Spoofing Vulnerability in HiRDBCRITICAL 9.80.6 %
CVE-2026-82116Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		Missing Authentication for Critical Function Vulnerability in HiRDBCRITICAL 9.80.6 %
CVE-2026-82118Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		Stack-based Buffer Overflow Vulnerability in HiRDBCRITICAL 9.80.5 %
CVE-2026-82120Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		Heap-based Buffer Overflow Vulnerability in HiRDBCRITICAL 9.80.4 %
CVE-2026-82119Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		OS Command Injection Vulnerability in HiRDBCRITICAL 9.81.0 %
CVE-2026-82122Hitachi HiRDB Server Version 10 10-00 – < 10-12-01
Hitachi HiRDB Server Version 9 09-00 – 09-66-22
+3 more		Stack-based Buffer Overflow Vulnerability in HiRDBCRITICAL 9.40.5 %
CVE-2026-76939Hitachi JP1/Automatic Job Management System 3 - Manager 11-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent 11-00 – < 13-50-31		Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.80.5 %
CVE-2026-76936Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.40.5 %
CVE-2026-76937Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.40.5 %
CVE-2026-76938Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.80.6 %
CVE-2026-76935Hitachi JP1/Automatic Job Management System 3 - Manager 13-10 – < 13-50-31Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.40.3 %
CVE-2026-76934Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent 10-00 – < 13-50-31
+1 more		Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.80.5 %
CVE-2026-76933Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent 10-00 – < 13-50-31
+1 more		Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.40.5 %
CVE-2026-76932Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Agent 10-00 – < 13-50-31
+1 more		Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICAL 9.40.5 %
CVE-2026-86577Hitachi JP1/Integrated Management 3 - Manager 13-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Manager 13-00 – < 13-50-31
+3 more		Out-of-bounds Write Vulnerability in JP1 ProductsCRITICAL 9.40.5 %
CVE-2026-86576Hitachi JP1/Integrated Management 3 - Manager 13-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Manager 13-00 – < 13-50-31
+3 more		Heap-based Buffer Overflow Vulnerability in JP1 ProductsCRITICAL 9.40.5 %
CVE-2026-86575Hitachi JP1/Integrated Management 3 - Manager 13-00 – < 13-50-31
Hitachi JP1/Automatic Job Management System 3 - Manager 13-00 – < 13-50-31
+3 more		Stack-based Buffer Overflow Vulnerability in JP1 ProductsCRITICAL 9.40.5 %