{"id":"CVE-2026-76936","published":"2026-10-27T10:16:55.223","lastModified":"2026-10-27T15:00:49.240","description":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in the JP1/Automatic Job Management System 3 Manager component allows remote attackers to crash the service or potentially execute arbitrary code by sending a specially crafted request that exceeds the allocated stack buffer size.","exploitability":"Exploitation requires no authentication or user interaction and is straightforward for an attacker with network access to the affected service, as the vulnerability stems from insufficient input validation in a network-facing component.","blast_radius":"Successful exploitation could lead to full system compromise of the manager host, enabling attackers to disrupt job scheduling operations, exfiltrate sensitive operational data, or pivot laterally within the managed infrastructure.","remediation":"Upgrade JP1/Automatic Job Management System 3 Manager to version 13-50-31 or later, as this is the first fixed release addressing the stack-based buffer overflow.","detection":"Defenders should monitor for异常 stack trace entries in application logs, unexpected service restarts of the JP1 Manager process, or unusually large incoming TCP payloads targeting the manager's listening port (typically port 10080 or as configured). No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","remote-exploit","ics","job-scheduling"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:03:03.632Z"}}