High severity7.2NVD Advisory· Published Sep 22, 2026· Updated Sep 28, 2026
CVE-2026-76713
CVE-2026-76713
Description
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full system compromise.
Affected products
2- cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*Range: <5.1.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
2- HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise SystemsCyber Security News · Sep 25, 2026
- HPE ALE: Ten Vulnerabilities Disclosed, Including Critical Flaws for Remote CompromiseVypr Intelligence · Sep 22, 2026