CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full system compromise.

Score

CVSS 3.1 7.2 High

Status

Analyzed - security-alert@hpe.com

Published

2026-09-22

Last modified

2026-09-22

Weaknesses

CWE-269

Affected products

• Analytics And Location Engine (Arubanetworks)
• Ale (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US