Zero Radar
← feed
CriticalVulnerabilityCVE-2026-76934updated 27 Oct 2026, 10:17 UTC

JP1 Automatic Job Management System 3 has a stack buffer overflow flaw

A flaw in this job-scheduling software could let an attacker overwrite memory the program uses, which can let them crash it or take control of it. Scheduling software often runs important business tasks, so a takeover could disrupt or manip

Fix availableOfficial source
SeverityCriticalCVSS 9.8 of 10
Being exploited?UnclearNo reports either way yet
Fix available?YesUpgrade to 13-50-31 or later · since 27 Oct 2026
How sure is this?Official sourceBacked by an official source

What happened

A stack-based buffer overflow affects the Manager and Agent components of JP1/Automatic Job Management System 3 in versions from 11-00 before 13-50-31. Writing past a fixed-size buffer on the stack can corrupt program control flow.

Why it is dangerous: Successful exploitation could allow code execution or a crash of the job management service, affecting automated business processes. Organizations running JP1/AJS3 Manager or Agent on affected versions are at risk.

Are you affected?

You are affected if you run JP1/Automatic Job Management System 3 Manager or Agent at any version from 11-00 up to, but not including, 13-50-31.

JP1/Automatic Job Management System 3 - Manager: 11-00 to before 13-50-31; JP1/Automatic Job Management System 3 - Agent: 11-00 to before 13-50-31

What to do

  1. Identify all JP1/Automatic Job Management System 3 Manager and Agent installations and their versions
  2. Update affected Manager and Agent installations to 13-50-31 or later
  3. Restrict network access to JP1/AJS3 services until patching is complete

Timeline

  1. 27 Oct 2026, 10:16 UTC
    Publicly disclosed
  2. 27 Oct 2026, 10:16 UTC
    Reported by NVD · NVD
  3. 27 Oct 2026, 10:17 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-76934
CVSS
9.8 / 10
EPSS
0.5% chance of exploitation within 30 days
Disclosed
27 Oct 2026, 10:16 UTC
On Zero Radar
27 Oct 2026, 10:17 UTC (1 min after disclosure)
Last change
27 Oct 2026, 10:17 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

JP1 Automatic Job Management System 3 has a stack buffer overflow flaw · Zero Radar