A heap-based buffer overflow vulnerability exists in JP1/Automatic Job Management System 3 affecting both Manager and Agent components from version 11-00 up to but not including 13-50-31. The vulnerability has a critical severity with a CVSS score of 9.4, indicating it can be exploited remotely without privileges or user interaction, potentially leading to high confidentiality and integrity impact and low availability impact.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, including several LTS releases, contain a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). This vulnerability allows an unauthenticated remote attacker to induce the server to make unintended requests. The issue is fixed in versions 8.9.0.0 or later, 8.6.1.30 or later, 8.3.1.50 or later, and 7.13.1.90 or later.
CVE-2026-76939 is a critical heap-based buffer overflow vulnerability in Hitachi JP1/Automatic Job Management System 3 - Manager and Agent components. It affects versions from 11-00 up to but not including 13-50-31. The flaw allows remote attackers to execute arbitrary code or cause denial of service without requiring authentication. A fix is available in version 13-50-31.
CVE-2026-76936 is a critical stack-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 up to but not including 13-50-31. The flaw allows an attacker to execute code remotely without privileges or user interaction, potentially leading to full system compromise. A fix is available in version 13-50-31.
CVE-2026-76937 is a heap-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 up to but not including 13-50-31. This flaw allows an attacker to potentially execute arbitrary code or cause a denial of service. The vulnerability has a critical severity with a CVSS score of 9.4. A fix is available in version 13-50-31.
CVE-2026-76938 is a critical authentication bypass vulnerability in Hitachi JP1/Automatic Job Management System 3 - Manager versions from 10-00 up to but not including 13-50-31. This flaw allows an attacker to bypass authentication mechanisms, potentially leading to full system compromise. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. A fixed version 13-50-31 is available to remediate this issue.
CVE-2026-76935 is a critical stack-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 13-10 up to but not including 13-50-31. This flaw allows unauthenticated remote attackers to execute arbitrary code with high impact on confidentiality and integrity, and a lower impact on availability. A fix is available in version 13-50-31.
CVE-2026-76934 is a critical stack-based buffer overflow vulnerability affecting Hitachi JP1/Automatic Job Management System 3 - Manager and Agent components. It impacts versions from 10-00 up to but not including 13-50-31. The flaw allows remote attackers to execute arbitrary code or cause denial of service without requiring privileges or user interaction. A fix is available in version 13-50-31.
CVE-2026-76932 is a critical stack-based buffer overflow vulnerability affecting Hitachi JP1/Automatic Job Management System 3 - Manager and Agent versions from 11-00 up to but not including 13-50-31. The flaw allows an attacker to potentially execute arbitrary code with high impact on confidentiality and integrity, and a lower impact on availability. A fix is available in version 13-50-31.