High severity7.2NVD Advisory· Published Sep 22, 2026· Updated Sep 28, 2026
CVE-2026-76714
CVE-2026-76714
Description
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected products
2- cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*Range: <5.1.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
2- HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise SystemsCyber Security News · Sep 25, 2026
- HPE ALE: Ten Vulnerabilities Disclosed, Including Critical Flaws for Remote CompromiseVypr Intelligence · Sep 22, 2026