Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

JP1 Job Management System 3 Manager lets login without credentials

CVE-2026-76938 · published today
Summary

Versions of JP1 Job Management System 3 Manager released before 13-50-31 allow someone to skip the login step and gain access to the system. An unauthorized person could then view or change job schedules and related data. Upgrade to the latest version or apply Hitachi's security patch promptly.

What to do
  • Update hitachi jp1/automatic job management system 3 - manager to version 11-50-39.
Affected software
VendorProductAffected versions
hitachi jp1/automatic job management system 3 - manager < 13-50-31
Fix: upgrade to 11-50-39
Original advisory text
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CVE-2026-76938 · NVD
CVE-2026-76938 · MITRE
Track software like this
Free during beta