{"id":"CVE-2026-76937","published":"2026-10-27T10:16:55.337","lastModified":"2026-10-27T15:00:49.240","description":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in JP1/Automatic Job Management System 3 Manager (versions before 13-50-31) allows remote attackers to corrupt memory via crafted input, potentially leading to arbitrary code execution or system compromise.","exploitability":"Exploitation is likely straightforward for remote attackers due to the high CVSS score, lack of authentication or user interaction requirements, and absence of known mitigations.","blast_radius":"Successful exploitation could enable full system compromise including data theft, unauthorized control, and partial denial of service on affected manager systems.","remediation":"Upgrade JP1/Automatic Job Management System 3 Manager to version 13-50-31 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["heap-overflow","remote-exploit","memory-corruption","ics"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:03:10.391Z"}}