CVE-2026-76938 - Vulnerability Details - OpenCVE

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Hitachi	Jp1/automatic Job Management System 3 - Manager

No data.

No data.

References

Link	Providers
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html

History

Wed, 04 Nov 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 30 Oct 2026 23:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hitachi Hitachi jp1/automatic Job Management System 3 - Manager
Vendors & Products		Hitachi Hitachi jp1/automatic Job Management System 3 - Manager

Tue, 27 Oct 2026 09:45:00 +0000

Type	Values Removed	Values Added
Description		Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Title		Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Weaknesses		CWE-290
References		https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Hitachi

Published: 2026-10-27T09:37:16.816Z

Updated: 2026-11-04T16:41:34.516Z

Reserved: 2026-08-20T02:15:24.113Z

Link: CVE-2026-76938

Vulnrichment

Updated: 2026-11-04T16:41:30.699Z

NVD

Status : Deferred

Published: 2026-10-27T10:16:55.450

Modified: 2026-11-04T17:17:37.517

Link: CVE-2026-76938

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76938", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "state": "PUBLISHED", "assignerShortName": "Hitachi", "dateReserved": "2026-08-20T02:15:24.113Z", "datePublished": "2026-10-27T09:37:16.816Z", "dateUpdated": "2026-11-04T16:41:34.516Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2026-10-27T09:37:16.816Z"}, "title": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-290", "description": "CWE-290 Authentication bypass by spoofing", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "Hitachi", "product": "JP1/Automatic Job Management System 3 - Manager", "versions": [{"status": "affected", "version": "10-00", "lessThan": "13-50-31", "changes": [{"at": "13-50-31", "status": "unaffected"}, {"at": "12-60-53", "status": "unaffected"}, {"at": "11-50-39", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.<br><p>This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.</p>"}]}], "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"advisory": "hitachi-sec-2026-142", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-04T16:41:23.975725Z", "id": "CVE-2026-76938", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-04T16:41:34.516Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76938", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-04T16:41:23.975725Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-04T16:41:30.699Z"}}], "cna": {"title": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3", "source": {"advisory": "hitachi-sec-2026-142", "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi", "product": "JP1/Automatic Job Management System 3 - Manager", "versions": [{"status": "affected", "changes": [{"at": "13-50-31", "status": "unaffected"}, {"at": "12-60-53", "status": "unaffected"}, {"at": "11-50-39", "status": "unaffected"}], "version": "10-00", "lessThan": "13-50-31", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.", "supportingMedia": [{"type": "text/html", "value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.<br><p>This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-290", "description": "CWE-290 Authentication bypass by spoofing"}]}], "providerMetadata": {"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "shortName": "Hitachi", "dateUpdated": "2026-10-27T09:37:16.816Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76938", "state": "PUBLISHED", "dateUpdated": "2026-11-04T16:41:34.516Z", "dateReserved": "2026-08-20T02:15:24.113Z", "assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82", "datePublished": "2026-10-27T09:37:16.816Z", "assignerShortName": "Hitachi"}, "dataVersion": "5.2"}