CVE-2026-76709

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security-alert@hpe.com

Published

2026-09-22

Last modified

2026-09-23

Weaknesses

CWE-284

Affected products

• Analytics And Location Engine (Arubanetworks)
• Ale (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US