{"id":"CVE-2026-76938","published":"2026-10-27T10:16:55.450","lastModified":"2026-10-27T15:00:49.240","description":"Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-290"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The JP1/Automatic Job Management System 3 Manager has an authentication bypass vulnerability (CWE-290), allowing unauthenticated remote attackers to gain full access to the system.","exploitability":"Exploitation is straightforward for remote attackers due to lack of authentication requirements and no user interaction needed.","blast_radius":"Successful exploitation grants full confidentiality, integrity, and availability compromise, enabling complete system takeover and potential lateral movement within managed environments.","remediation":"Upgrade JP1/Automatic Job Management System 3 Manager to version 13-50-31 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","remote-exploit","critical-severity"],"model":"garnet-coder","analyzedAt":"2026-10-28T09:59:23.514Z"}}