High severity7.5NVD Advisory· Published Sep 22, 2026· Updated Sep 28, 2026
CVE-2026-76710
CVE-2026-76710
Description
A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful exploitation could result in the disclosure of sensitive site hierarchy, infrastructure details, and client device information.
Affected products
2- cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*Range: <5.1.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
3- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsThe Hacker News · Oct 5, 2026
- HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise SystemsCyber Security News · Sep 25, 2026
- HPE ALE: Ten Vulnerabilities Disclosed, Including Critical Flaws for Remote CompromiseVypr Intelligence · Sep 22, 2026