跳到正文
CVE-high(cvefeed.io)·· 5 小時前精選AI 評分61

JP1/Automatic Job Management System 3 發現身份驗證繞過漏洞 (CVE-2026-76938)

CVE-2026-76938 - Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

AI 導讀

JP1/Automatic Job Management System 3 3 版本存在身份驗證繞過漏洞 (CVE-2026-76938)。

推薦理由

此漏洞可讓未授權使用者繞過身份驗證,建議即時升級至 13-50-31 版以保護系統安全;若無法立即升級,請暫時限制相關功能以降低風險。

正文 · 原文

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.

Impact

Affected Products

The following products are affected by CVE-2026-76938 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 CRITICAL 50d0f415-c707-4733-9afc-8f6c0e9b3f82
CVSS 3.1 CRITICAL MITRE-CVE
CVSS 3.1 CRITICAL [email protected]

Address authentication bypass by applying updates for JP1/Automatic Job Management System.

  • Update JP1/Automatic Job Management System Manager.
  • Apply updates to version 13-50-31 or later.

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2026-76938.

URL Resource
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-76938 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-76938 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-76938 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-76938 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by [email protected]

    十月. 27, 2026

    Action Type Old Value New Value
    Added Description Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CWE CWE-290
    Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/76xxx/CVE-2026-76938.json">CVE-2026-76938</a>
    Added Reference https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.

來源: CVE-high (cvefeed.io)
開啟原文