CVE-2026-76934

CriticalCVSS 9.8/10Last modified Nov 4, 2026

Description

Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

VendorProductVersions
HitachiJP1/Automatic Job Management System 3 - Manager>= 10-00, < 13-50-31
HitachiJP1/Automatic Job Management System 3 - Agent>= 10-00, < 13-50-31
HitachiJP1/Automatic Job Management System 3 - Agent Minimal Edition>= 11-50, < 13-50-31

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-769359.4Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management SystemCVE-2026-769369.4Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management SystemCVE-2026-769379.4Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System CVE-2026-769389.8Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - MCVE-2026-769399.8Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3CVE-2026-76947.3A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an uCVE-2026-769407.5The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This coulCVE-2026-769439.8Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended accessCVE-2026-769457.5The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay CVE-2026-769499.1Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in CVE-2026-76957.3A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unkCVE-2026-769549.8An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) be
CVE-2026-76934: Critical severity, CVSS 9.8 | Vulnix