HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise Systems
HPE fixed critical unauthenticated flaws in Networking ALE that enable credential abuse and arbitrary file writes.
68
CVE-2026-76715
- CVSS 3.1
- 7.1 high
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.
- Vendors
- arubanetworks
- Products
- analytics and location engine
- Weakness
- CWE-300
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
2 storiesHPE Networking Analytics Engine Flaws Let Attackers Gain Root Access
HPE patched ten Analytics Engine flaws, including unauthenticated bugs that can give attackers root.
68