Zero Radar
← feed
CriticalVulnerabilityCVE-2026-76935updated 27 Oct 2026, 10:17 UTC

Hitachi JP1 job scheduler can be crashed or taken over by a memory overflow flaw

A bug in a software tool that runs automated business jobs lets a remote attacker send specially crafted data that overflows a memory area, which can crash the system or let the attacker run their own code on it.

Fix availableOfficial source
SeverityCriticalCVSS 9.4 of 10
Being exploited?UnclearNo reports either way yet
Fix available?YesVersion 13-50-31 or later · since 27 Oct 2026
How sure is this?Official sourceBacked by an official source

What happened

A stack-based buffer overflow in JP1/Automatic Job Management System 3 - Manager (versions 10-00 up to but not including 13-50-31) allows memory corruption through crafted input.

Why it is dangerous: Successful exploitation could let an attacker take control of the job manager server, which typically sits at the centre of automated business operations and has access to many other systems.

Are you affected?

You are affected if you run JP1/Automatic Job Management System 3 - Manager at any version from 10-00 before 13-50-31.

JP1/Automatic Job Management System 3 - Manager: 10-00 to before 13-50-31

What to do

  1. Update JP1/Automatic Job Management System 3 - Manager to version 13-50-31 or later
  2. Until patched, restrict network access to the manager so only trusted hosts can reach it
  3. Check which JP1 Manager versions are installed across your environment and prioritise any older than 13-50-31

Timeline

  1. 27 Oct 2026, 10:16 UTC
    Publicly disclosed
  2. 27 Oct 2026, 10:16 UTC
    Reported by NVD · NVD
  3. 27 Oct 2026, 10:17 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-76935
CVSS
9.4 / 10
EPSS
0.3% chance of exploitation within 30 days
Disclosed
27 Oct 2026, 10:16 UTC
On Zero Radar
27 Oct 2026, 10:17 UTC (1 min after disclosure)
Last change
27 Oct 2026, 10:17 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Hitachi JP1 job scheduler can be crashed or taken over by a memory overflow flaw · Zero Radar