CVE-2026-76939
waiting for further signalsZero needs more public information before it can validate it.GHSA-jrf8-wj29-3qcq ↗EUVD-2026-110661 ↗
description
JP1/Automatic Job Management System 3 Manager and Agent versions from 11-00 through releases before 13-50-31 are affected. A remote attacker without authentication may be able to compromise confidentiality, integrity, or availability when a vulnerable service is reachable over the network.
mitigation
Update JP1/Automatic Job Management System 3 Manager and Agent to version 13-50-31 or later. Until updates are complete, restrict network access to the affected services to trusted hosts.
fixed in 13-50-31
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-27 09:37Zghsa: trigger signal, started the run
- 2026-10-27 09:37Zcve.org record for CVE-2026-76939
this entry in the feed
GET /api/v1/feed/CVE-2026-76939
{ "etk_id": "ETK-2026-2760", "cve_id": "CVE-2026-76939", "display_id": "CVE-2026-76939", "ghsa_id": "GHSA-jrf8-wj29-3qcq", "euvd_id": "EUVD-2026-110661", "status": "published", "anchor_state": "anchored", "title": "Heap buffer overflow in JP1/AJS3 Manager", "summary": "JP1/Automatic Job Management System 3 Manager and Agent versions from 11-00 through releases before 13-50-31 are affected. A remote attacker without authentication may be able to compromise confidentiality, integrity, or availability when a vulnerable service is reachable over the network.", "mitigation": "Update JP1/Automatic Job Management System 3 Manager and Agent to version 13-50-31 or later. Until updates are complete, restrict network access to the affected services to trusted hosts.", "vendor": "Hitachi", "product": "JP1/Automatic Job Management System 3 - Manager", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 11-00, < 13-50-31" ], "ecosystem": null, "fixed_versions": [ "13-50-31" ], "package_name": "JP1/Automatic Job Management System 3 - Manager", "purl": null }, { "affected_notes": [], "affected_ranges": [ ">= 11-00, < 13-50-31" ], "ecosystem": null, "fixed_versions": [ "13-50-31" ], "package_name": "JP1/Automatic Job Management System 3 - Agent", "purl": null } ], "cwes": null, "cvss_score": 9.8, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 14.544913833333334, "t0_at": "2026-10-27T09:37:19.629000+00:00", "signals": { "trigger_signal": { "at": "2026-10-27T09:37:19.629000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-27T09:37:19.629000+00:00", "url": "https://github.com/advisories/GHSA-jrf8-wj29-3qcq" } } }
published 2026-10-27 13:14Z
last change 2026-10-27 17:35Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.