Description
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Published: 2026-10-27
Score: 9.8 Critical
EPSS: n/a
KEV: No
Impact: Authentication Bypass
Action: Immediate Patch
AI Analysis

Impact

The vulnerability allows an attacker to bypass the JP1/Automatic Job Management System 3 Manager authentication mechanism. An unauthenticated user can assume privileged access, enabling them to view, modify, or delete job configurations, trigger arbitrary jobs, and potentially compromise the entire managed infrastructure. This flaw permits full compromise of confidentiality, integrity, and availability of the system.

Affected Systems

The vulnerability impacts Hitachi JP1/Automatic Job Management System 3 – Manager versions 10‑00 through any release prior to 13‑50‑31. Users running any of these affected releases should verify their installed version and determine whether they are within the vulnerable range.

Risk and Exploitability

The flaw carries a CVSS score of 9.8, classifying it as critical. The EPSS score is currently unavailable, but the lack of a KEV listing does not diminish the high exploitation potential for an organization that runs the affected system. The attack vector is not explicitly stated in the advisory; however, authentication bypass normally indicates a remote or local exploit capable of injecting crafted credentials or requests, so it is prudent to assume a remote possibility until proven otherwise.

Generated by OpenCVE AI on October 27, 2026 at 10:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑released security update that resolves the authentication bypass in JP1/Automatic Job Management System 3 – Manager.
  • Upgrade to version 13‑50‑31, or any subsequent release that contains the security fix confirmed by Hitachi.
  • Restrict network access to the JP1 Manager services to trusted hosts, and enforce secure authentication mechanisms such as strong passwords or multi‑factor authentication to reduce risk if the patch cannot be applied immediately.

Generated by OpenCVE AI on October 27, 2026 at 10:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Title Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Weaknesses CWE-290
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Hitachi

Published:

Updated: 2026-10-27T09:37:16.816Z

Reserved: 2026-08-20T02:15:24.113Z

Link: CVE-2026-76938

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T10:16:55.450

Modified: 2026-10-27T10:16:55.450

Link: CVE-2026-76938

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T10:30:11Z

Weaknesses
  • CWE-290

    Authentication Bypass by Spoofing