# CVE-2026-76939: Hitachi JP1/Automatic Job Management System 3 heap-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-76939-heap-based-buffer-overflow-vulnerability-in-jp1-automatic-job  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-76939 · Severity: critical · CVSS 9.8 · Published 2026-10-27

Hitachi's JP1/Automatic Job Management System 3 is an enterprise automation platform that manages scheduled jobs across distributed systems. A heap-based buffer overflow vulnerability allows a remote attacker with no authentication to crash the service or execute arbitrary code, potentially compromising job scheduling infrastructure and systems under management.

Technologies: [Hitachi JP1/Automatic Job Management System 3 - Agent](https://junglewise.ai/threats/technologies/jp1-automatic-job-management-system-3-agent), [Hitachi JP1/Automatic Job Management System 3 - Manager](https://junglewise.ai/threats/technologies/jp1-automatic-job-management-system-3-manager). Vendors: [Hitachi](https://junglewise.ai/threats/vendors/hitachi).

## Quick answers

**Is CVE-2026-76939 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76939 being exploited in the wild.

**How severe is CVE-2026-76939?** Critical severity, with a CVSS score of 9.8, published 27 October 2026.

**Which products and versions are affected?** Hitachi JP1/Automatic Job Management System 3 - Agent 11-00 through 13-50-04; affected versions: Windows and Linux 11-00-32, 11-10-34, 11-50-36 (Linux) / 11-50-36 (Windows), 12-00-37 (Windows) / 12-00-36 (Linux), 12-10-06 (Linux) / 12-10-06 (Windows), 12-50-51, 12-60-51, 13-00-06, 13-10-06, 13-50-04; Hitachi JP1/Automatic Job Management System 3 - Manager 11-00 through 13-50-04; affected versions: Windows and Linux 11-00-32, 11-10-34, 11-50-38, 12-00-39, 12-10-09, 12-50-52, 12-60-51, 13-00-09 (Windows) / 13-00-08 (Linux), 13-10-06, 13-50-04.

**Is there a fix for CVE-2026-76939?** Yes: fixed in Manager and Agent: Windows and Linux 13-50-31, 12-60-53, 11-50-39. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-76939 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-76939?** Check whether you run Hitachi JP1/Automatic Job Management System 3 - Agent or Hitachi JP1/Automatic Job Management System 3 - Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Manager and Agent: Windows and Linux 13-50-31, 12-60-53, 11-50-39

## Technical details

A heap-based buffer overflow in JP1/Automatic Job Management System 3 allows remote code execution over the network without authentication or user interaction. The vulnerability affects both the Manager and Agent components across Windows and Linux platforms. Fixed versions: Manager and Agent 13-50-31, 12-60-53, and 11-50-39.

## Affected products

- Hitachi JP1/Automatic Job Management System 3 - Manager 11-00 through 13-50-04; affected versions: Windows and Linux 11-00-32, 11-10-34, 11-50-38, 12-00-39, 12-10-09, 12-50-52, 12-60-51, 13-00-09 (Windows) / 13-00-08 (Linux), 13-10-06, 13-50-04
- Hitachi JP1/Automatic Job Management System 3 - Agent 11-00 through 13-50-04; affected versions: Windows and Linux 11-00-32, 11-10-34, 11-50-36 (Linux) / 11-50-36 (Windows), 12-00-37 (Windows) / 12-00-36 (Linux), 12-10-06 (Linux) / 12-10-06 (Windows), 12-50-51, 12-60-51, 13-00-06, 13-10-06, 13-50-04

## Timeline

- 2026-10-27: disclosed

## References

- [https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-143/index.html](https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-143/index.html)

## Related threats

- [Hitachi JP1 out-of-bounds write vulnerability](https://junglewise.ai/threats/cve-2026-86577-out-of-bounds-write-vulnerability-in-jp1-products-this-issue)
- [Hitachi JP1 heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-86576-heap-based-buffer-overflow-vulnerability-in-jp1-products-this)
- [Hitachi JP1 stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-86575-stack-based-buffer-overflow-vulnerability-in-jp1-products-this)
- [Hitachi JP1/Automatic Job Management System 3 authentication bypass](https://junglewise.ai/threats/cve-2026-76938-authentication-bypass-vulnerability-in-jp1-automatic-job)
- [Hitachi JP1/Automatic Job Management System 3 heap overflow](https://junglewise.ai/threats/cve-2026-76937-heap-based-buffer-overflow-vulnerability-in-jp1-automatic-job)