CVE-2026-76934: Hitachi JP1/Automatic Job Management System 3 stack buffer overflow

CVE-2026-76934 · Severity: critical · CVSS 9.8 · Published 2026-10-27

JP1/Automatic Job Management System 3 is enterprise job scheduling software used to automate and manage business processes across IT infrastructure. A stack-based buffer overflow vulnerability allows attackers to execute arbitrary code remotely without authentication, potentially leading to complete system compromise, data theft, or service disruption.

Technologies: Hitachi JP1/Automatic Job Management System 3 - Agent, Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition, Hitachi JP1/Automatic Job Management System 3 - Manager. Vendors: Hitachi.

Quick answers

Is CVE-2026-76934 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-76934 being exploited in the wild.
How severe is CVE-2026-76934?
Critical severity, with a CVSS score of 9.8, published 27 October 2026.
Which products and versions are affected?
Hitachi JP1/Automatic Job Management System 3 - Agent 10-00 through 13-50-04 (multiple platforms: Linux, AIX, HP-UX, Solaris); Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition 11-50 through 13-50-02 (Linux); Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 through 13-50-04 (multiple platforms: Linux, AIX, HP-UX, Solaris).
Is there a fix for CVE-2026-76934?
Yes: fixed in JP1/Automatic Job Management System 3 - Manager: Linux 13-50-31, 12-60-53, 11-50-39; AIX/HP-UX/Solaris 12-60-53, 11-50-39. JP1/Automatic Job Management System 3 - Agent: Linux 13-50-31, 12-60-53, 11-50-39; AIX 13-10-31, 12-60-53, 11-50-39; HP-UX/Solaris 12-60-53, 11-50-39. JP1/Automatic Job Management System 3 - Agent Minimal Edition: Linux 13-50-31, 12-60-53, 11-50-39.. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-76934 attacked?
It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-76934?
Check whether you run Hitachi JP1/Automatic Job Management System 3 - Agent, Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition or Hitachi JP1/Automatic Job Management System 3 - Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: JP1/Automatic Job Management System 3 - Manager: Linux 13-50-31, 12-60-53, 11-50-39; AIX/HP-UX/Solaris 12-60-53, 11-50-39. JP1/Automatic Job Management System 3 - Agent: Linux 13-50-31, 12-60-53, 11-50-39; AIX 13-10-31, 12-60-53, 11-50-39; HP-UX/Solaris 12-60-53, 11-50-39. JP1/Automatic Job Management System 3 - Agent Minimal Edition: Linux 13-50-31, 12-60-53, 11-50-39.

Technical details

This is a network-exploitable stack-based buffer overflow in JP1/Automatic Job Management System 3 Manager and Agent components. The vulnerability requires no authentication or user interaction, meaning an attacker can trigger it directly over the network. Successful exploitation results in remote code execution with the privileges of the affected service.

Affected products

  • Hitachi JP1/Automatic Job Management System 3 - Manager 10-00 through 13-50-04 (multiple platforms: Linux, AIX, HP-UX, Solaris)
  • Hitachi JP1/Automatic Job Management System 3 - Agent 10-00 through 13-50-04 (multiple platforms: Linux, AIX, HP-UX, Solaris)
  • Hitachi JP1/Automatic Job Management System 3 - Agent Minimal Edition 11-50 through 13-50-02 (Linux)

Timeline

  • 2026-10-27: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.