High severity7.1NVD Advisory· Published Sep 22, 2026· Updated Sep 28, 2026
CVE-2026-76715
CVE-2026-76715
Description
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.
Affected products
2- cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*Range: <5.1.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
2- HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise SystemsCyber Security News · Sep 25, 2026
- HPE ALE: Ten Vulnerabilities Disclosed, Including Critical Flaws for Remote CompromiseVypr Intelligence · Sep 22, 2026