SECURITYCRITICALCVE-2026-76932

CVE-2026-76932: Hitachi JP1/Automatic Job Management System 3 Stack Buffer Overflow

CVE-2026-76932 is a critical stack-based buffer overflow in Hitachi JP1/AJS3 Manager and Agent. Upgrade to 13-50-31.

Dylan H.

Security Team

October 28, 2026
1 min read
CVE-2026-76932: Hitachi JP1/Automatic Job Management System 3 Stack Buffer Overflow

Critical severity

Rated critical. Prioritise patching — see the remediation guidance below.

Affected Products

  • JP1/Automatic Job Management System 3 - Manager 11-00 before 13-50-31
  • JP1/Automatic Job Management System 3 - Agent 11-00 before 13-50-31

Executive Summary

CVE-2026-76932 is a stack-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 (JP1/AJS3), scored CVSS 9.4. It was published October 27, 2026 as part of a batch of related JP1/AJS3 memory-safety flaws covered in Hitachi advisory Hitachi-SEC-2026-140.

Affected Versions

ComponentAffectedFixed
JP1/AJS3 Manager11-00 before 13-50-3113-50-31
JP1/AJS3 Agent11-00 before 13-50-3113-50-31

Related CVEs in the Same Advisory

  • CVE-2026-76933: heap-based buffer overflow (9.4)
  • CVE-2026-76934: stack-based buffer overflow (9.8)
  • CVE-2026-76935 and CVE-2026-76936: stack-based buffer overflows in Manager (9.4)
  • CVE-2026-76937: heap-based buffer overflow (9.4)

Exploitation Status

No public exploit or active exploitation is known, and the CVE is not in CISA KEV. Job schedulers typically run with high privileges and connect many hosts, so a memory-corruption flaw here is a high-value target.

Remediation

  1. Upgrade JP1/AJS3 Manager and Agent to 13-50-31 or later.
  2. Restrict network access to JP1/AJS3 ports to trusted management hosts.
  3. Monitor for unexpected crashes of JP1/AJS3 services.

References