{"id":"CVE-2026-76932","kind":"vulnerability","aliases":["CVE-2026-76932"],"related":[],"title":"JP1 Automatic Job Management System 3: stack buffer overflow in Manager and Agent","description":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.","summary":"JP1/Automatic Job Management System 3 Manager and Agent versions from 11-00 before 13-50-31 contain a stack-based buffer overflow. The sources do not say what input triggers it, but a successful exploit can corrupt the stack and may let an attacker run code on the host.","severity":"critical","cvss":9.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["automatic-job-management","enterprise","infrastructure","job-scheduling","jp1","windows"],"not_affected_if":["version-13-50-31-or-later"],"how_to_check":"- Check the installed JP1/Automatic Job Management System 3 Manager and Agent version against `13-50-31`\n- unknown for any other check, the sources do not say","fix":"- Upgrade JP1/Automatic Job Management System 3 Manager and Agent to `13-50-31` or later\n- unknown for workarounds, the sources do not say","status":"open","published_at":"2026-10-27T10:16:54+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","triaged_at":"2026-10-27T10:31:51+00:00","updated_at":"2026-10-27T10:31:51+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-27T10:31:51Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade JP1/Automatic Job Management System 3 Manager and Agent to `13-50-31` or later\n- unknown for workarounds, the sources do not say","reach":"unknown","title":"JP1 Automatic Job Management System 3: stack buffer overflow in Manager and Agent","impact":"high","summary":"JP1/Automatic Job Management System 3 Manager and Agent versions from 11-00 before 13-50-31 contain a stack-based buffer overflow. The sources do not say what input triggers it, but a successful exploit can corrupt the stack and may let an attacker run code on the host.","category":"infrastructure","nicknames":[],"who_cares":["jp1","automatic-job-management","job-scheduling","windows","enterprise"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Code runs on the host via stack memory corruption","analyst_note":"Check the vendor advisory from Hitachi for the triggering input, required privileges and network exposure; NVD text alone does not say.","how_to_check":"- Check the installed JP1/Automatic Job Management System 3 Manager and Agent version against `13-50-31`\n- unknown for any other check, the sources do not say","needs_analyst":true,"not_affected_if":["version-13-50-31-or-later"],"who_is_affected":"Sites running JP1/Automatic Job Management System 3 Manager or Agent from 11-00 up to but not including 13-50-31 are affected. The sources do not describe the data path or required configuration, so the exposure of any given install is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000622,"input_tokens":3327,"output_tokens":579,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-00':42B,104C,117C '-2026':15A,18A '-31':46B,108C,121C '-50':45B,107C,120C '-76932':16A,19A '11':41B,103C,116C '13':44B,106C,119C '3':6A,35B,92C,100C,113C 'affect':95C 'agent':13A,38B,114C 'attack':75B 'automat':2A,21B 'automatic-job-manag':20B 'base':51B,83C 'buffer':8A,52B,84C 'code':77B 'contain':47B 'corrupt':68B 'cve':14A,17A 'enterpris':24B 'exploit':66B 'host':80B 'infrastructur':25B 'input':60B 'issu':94C 'job':3A,22B,27B,32B,89C,97C,110C 'job-schedul':26B 'jp1':1A,29B 'jp1/automatic':31B,88C,96C,109C 'let':73B 'manag':4A,11A,23B,33B,36B,90C,98C,101C,111C 'may':72B 'overflow':9A,53B,85C 'run':76B 'say':58B 'schedul':28B 'sourc':55B 'stack':7A,50B,70B,82C 'stack-bas':49B,81C 'success':65B 'system':5A,34B,91C,99C,112C 'trigger':61B 'version':39B 'vulner':86C 'window':30B","nicknames":[],"mitigations":[],"who_affected":"Sites running JP1/Automatic Job Management System 3 Manager or Agent from 11-00 up to but not including 13-50-31 are affected. The sources do not describe the data path or required configuration, so the exposure of any given install is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:54+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76932","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76932","severity":null,"published_at":"2026-10-27T10:16:54+00:00","modified_at":"2026-10-27T10:16:54+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","fetched_at":"2026-10-27T10:31:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}