Description
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Published: 2026-10-27
Score: 9.8 Critical
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

Stack-based buffer overflow exists in JP1/Automatic Job Management System 3, allowing an attacker to overwrite memory on the stack and execute arbitrary code. This vulnerability can compromise the confidentiality, integrity, and availability of the affected system by allowing full control over the Manager or Agent processes.

Affected Systems

Hitachi JP1/Automatic Job Management System 3 – Manager versions prior to 13‑50‑31 and JP1/Automatic Job Management System 3 – Agent (including the Minimal Edition) versions prior to 13‑50‑31 are vulnerable. Any instance running those releases is at risk.

Risk and Exploitability

The CVSS score of 9.8 classifies this as a critical vulnerability. EPSS data is not available, so the current exploitation probability is unknown; the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote, requiring network access to the Manager or Agent services, and may need authenticated or authorized access to send malformed data that triggers the overflow.

Generated by OpenCVE AI on October 27, 2026 at 10:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Hitachi security update that includes the fix for this buffer overflow or upgrade to version 13‑50‑31 or later.
  • If a patch cannot be applied immediately, restrict access to the Manager and Agent services to trusted IP ranges or place them behind a firewall to reduce exposure.
  • Monitor system logs for signs of exploitation attempts, such as abnormal process creation or memory corruption events, and enforce strict access controls to limit which users can communicate with the Manager or Agent.

Generated by OpenCVE AI on October 27, 2026 at 10:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Title Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Hitachi

Published:

Updated: 2026-10-27T09:37:14.930Z

Reserved: 2026-08-20T02:15:24.113Z

Link: CVE-2026-76934

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T10:16:54.990

Modified: 2026-10-27T10:16:54.990

Link: CVE-2026-76934

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T10:30:11Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow