CVE-2026-76937

CriticalCVSS 9.4/10Last modified Nov 4, 2026

Description

Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.

Metrics

CVSS 3.1 9.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-769389.8Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - MCVE-2026-769399.8Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3CVE-2026-76947.3A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an uCVE-2026-769407.5The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This coulCVE-2026-769439.8Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended accessCVE-2026-769457.5The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay CVE-2026-769499.1Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in CVE-2026-76957.3A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unkCVE-2026-769549.8An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) beCVE-2026-769558.8A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attCVE-2026-769567.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in beinCVE-2026-769577.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simi
CVE-2026-76937: Critical severity, CVSS 9.4 | Vulnix