CVE-2026-76715

A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.

Score

CVSS 3.1 7.1 High

Status

Analyzed - security-alert@hpe.com

Published

2026-09-22

Last modified

2026-09-22

Weaknesses

CWE-300

Affected products

• Analytics And Location Engine (Arubanetworks)
• Ale (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US