{"id":"CVE-2026-76934","published":"2026-10-27T10:16:54.990","lastModified":"2026-10-27T15:00:49.240","description":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-140/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in JP1/Automatic Job Management System 3 (Manager and Agent versions before 13-50-31) allows remote attackers to overwrite the stack and potentially execute arbitrary code without authentication.","exploitability":"Exploitation is straightforward for remote attackers due to the network-exposed, unauthenticated entry point and lack of mitigations like stack canaries or ASLR in the affected binaries.","blast_radius":"Successful exploitation could lead to full system compromise (remote code execution) of the JP1 Manager or Agent host, enabling lateral movement within operational technology or IT environments that rely on this job scheduling system.","remediation":"Upgrade JP1/Automatic Job Management System 3 Manager and Agent to version 13-50-31 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","stack-overflow","remote-code-execution","ics","job-scheduling"],"model":"garnet-coder","analyzedAt":"2026-10-28T09:59:09.873Z"}}