SECURITYCRITICALCVE-2026-76933

CVE-2026-76933: Hitachi JP1/Automatic Job Management System 3 Heap Buffer Overflow

CVE-2026-76933 is a critical heap-based buffer overflow in Hitachi JP1/AJS3 Manager and Agent. Upgrade to 13-50-31.

Dylan H.

Security Team

October 28, 2026
1 min read
CVE-2026-76933: Hitachi JP1/Automatic Job Management System 3 Heap Buffer Overflow

Critical severity

Rated critical. Prioritise patching — see the remediation guidance below.

Affected Products

  • JP1/Automatic Job Management System 3 - Manager 11-00 before 13-50-31
  • JP1/Automatic Job Management System 3 - Agent 11-00 before 13-50-31

Executive Summary

CVE-2026-76933 is a heap-based buffer overflow in Hitachi JP1/Automatic Job Management System 3 (JP1/AJS3), scored CVSS 9.4. It was published October 27, 2026 and is covered by Hitachi advisory Hitachi-SEC-2026-140.

Affected Versions

ComponentAffectedFixed
JP1/AJS3 Manager11-00 before 13-50-3113-50-31
JP1/AJS3 Agent11-00 before 13-50-3113-50-31

Related CVEs in the Same Advisory

CVE-2026-76932, CVE-2026-76934 (9.8), CVE-2026-76935, CVE-2026-76936, and CVE-2026-76937 are sibling memory-safety flaws in the same product.

Exploitation Status

No public exploit or active exploitation is known, and the CVE is not in CISA KEV. Heap overflows in privileged scheduler services can lead to code execution or service crashes.

Remediation

  1. Upgrade JP1/AJS3 Manager and Agent to 13-50-31 or later.
  2. Limit network exposure of JP1/AJS3 services to trusted management hosts.
  3. Watch for abnormal service restarts or crashes.

References