EUVD-2026-110657
GHSA-gp8c-xqp6-p6p6
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach JP1/AJS3 Manager network service
-
DeliverySend crafted oversized request
-
ExploitOverflow stack buffer (CWE-121)
-
ExecutionExecute attacker-controlled code in manager process
-
ImpactCompromise job-management server
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Stack buffer bounds checking
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Per the supplied CVSS vector this is remote, unauthenticated exploitation with no user interaction (AV:N/AC:L/PR:N/UI:N) against JP1/Automatic Job Management System 3 - Manager, meaning an attacker only needs network reachability to the vulnerable manager service. The concrete trigger - which service, protocol, or malformed input overflows the stack buffer - is not described in the available sources. Exploitation is limited to Manager instances at affected versions (per the description, 10-00 up to but not including 13-50-31; EUVD instead states 13-10 up to 13-50-31); hosts upgraded to 13-50-31 or later, or with the manager service not network-exposed, are out of scope. |
| Impact | The CVSS 3.1 base score of 9.4 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) describes a remotely reachable, low-complexity flaw that needs no privileges and no user interaction, which is the main driver of the 'act_now' priority label and justifies prompt remediation. However, the exploitation-likelihood signals are weak and partly in tension with that severity: the EPSS score is only 0.45% (39th percentile), the CVE is not listed in CISA KEV, and no public exploit or PoC reference is present in the provided data, so there is no public exploit identified at time of analysis. This is therefore a genuinely high-severity, highly exploitable-by-design issue rather than one with demonstrated in-the-wild activity - the 'act_now' call rests on the critical CVSS and vendor patch availability, not on observed exploitation. One signal to verify: the vector rates availability only Low (A:L) even though stack-based buffer overflows (CWE-121) commonly cause process crashes/DoS, and the exact trigger is not described in the available sources, so the real-world impact profile beyond C:H/I:H cannot be fully confirmed from the input. |
| Exploit ScenarioDerived | A remote, unauthenticated attacker with network reach to a JP1/Automatic Job Management System 3 - Manager host sends a crafted, oversized input to the exposed manager service, overflowing a stack buffer (CWE-121) and corrupting the process's control data. Per the CVSS vector this can lead to high confidentiality and integrity impact (potential code execution or data compromise) within the manager process. No public exploit code or PoC reference is identified in the available data, and the specific vulnerable input/protocol is not described in the sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 28, 2026
Stack-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 - Manager (versions from 10-00 up to but not including 13-50-31) gives remote, unauthenticated attackers who can reach the manager service a memory-corruption primitive that the CVSS 3.1 vector rates at 9.4 with high confidentiality and integrity impact and limited availability impact. No privileges and no user interaction are required per CVSS:3.1/AV:N/AC:L/PR:N/UI:N, and the concrete service, protocol or malformed input that overflows the stack buffer is not described in the available sources. No public exploit has been identified at time of analysis and the EPSS score is low (0.45%, 39th percentile); the act_now priority label is driven by the unauthenticated network-reachable attack surface rather than by observed exploitation. Vendor-released patch: 13-50-31.
RemediationAI
Upgrade JP1/Automatic Job Management System 3 - Manager to 13-50-31 or later; this is the fixed version named in the CVE description and in ENISA EUVD, and the vendor reports a patch is available via Hitachi security advisory hitachi-sec-2026-141 (https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-141/index.html), which should be consulted for the per-version upgrade path and any required intermediate steps, since Manager installs below 13-10 may need to follow a different upgrade route than the 13-10 to 13-50-31 line. Because the flaw is remotely reachable with no authentication and no user interaction, instances that cannot be patched immediately should be scoped out of exposure by ensuring the Manager service is not reachable from untrusted networks - restricting it to trusted management segments and job-execution agents - which limits who can deliver a malicious request but does not fix the underlying overflow and leaves the system vulnerable to any attacker who gains a foothold on an allowed network path. No vendor-documented configuration workaround beyond upgrading is described in the available sources.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is classified as CWE-121, a stack-based buffer overflow: input exceeding the size of a fixed-length buffer allocated on the stack overwrites adjacent stack memory, which can corrupt control data and, depending on the surrounding code, subvert program flow. Hitachi JP1/Automatic Job Management System 3 is an enterprise job-scheduling and workload-automation suite, and the affected component is the Manager, the central server role that job execution agents and operators connect to. The provided CPE entry (cpe:2.3:a:hitachi:jp1/automatic_job_management_system_3_-_manager:*:*:*:*:*:*:*:*) is wholly version-wildcarded, so CPE data does not narrow the affected build range; version scoping comes instead from the description (10-00 before 13-50-31) and from EUVD, which lists only 13-10 < 13-50-31. The sources do not specify which Manager service, listener or input parser reaches the vulnerable copy routine, nor whether exploitation requires a particular configuration or deployment mode, so the exact trigger remains unverified.
Know when Jp1 Automatic Job Management System 3 Manager gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Vendor describes a network-reachable stack overflow with no stated auth or interaction, so AV:N/AC:L/PR:N/UI:N; impacts mirror the vendor-rated C:H/I:H/A:L as the trigger is not independently detailed.
Primary rating from Vendor (Hitachi).
CVSS VectorVendor: Hitachi
Lifecycle Timeline
2DescriptionCVE.org
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Executive ViewAI
Hitachi JP1/Automatic Job Management System 3 - Manager, a critical component for enterprise job scheduling, contains a remote, unauthenticated stack-based buffer overflow (CVE-2026-76935) that can be triggered by anyone who can reach the manager service. Successful exploitation could allow an attacker to corrupt memory, potentially leading to full compromise of confidentiality and integrity of job scheduling data and execution, with limited availability impact. Leadership should prioritize patching because this vulnerability requires no credentials or user interaction and affects a central automation system that likely controls business-critical workflows.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than it was allocated to hold.
Authentication bypass in Hitachi JP1/Automatic Job Management System 3 - Manager (versions 10-00 up to but not including
A heap-based buffer overflow (CWE-122) in Hitachi JP1/Automatic Job Management System 3 - Manager and 3 - Agent, coverin
Stack-based buffer overflow (CWE-121) in Hitachi JP1/Automatic Job Management System 3 - Manager, - Agent, and - Agent M
A remote out-of-bounds write in Hitachi's JP1 operations-management suite lets an unauthenticated network attacker corru
Stack-based buffer overflow in Hitachi JP1/AJS3 Manager (versions 10-00 before 13-50-31) could let remote, unauthenticat
Heap-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 - Manager (versions 10-00 through builds pri
Stack-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 Manager, Agent, and Agent Minimal Edition b
Heap-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 Manager, Agent, and Agent Minimal Edition be
Heap-based buffer overflow (CWE-122) in Hitachi JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management Syst
Stack-based buffer overflow in Hitachi JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 (Man
Exploit-DB