ArubaOS (Product): news timeline & CVEs

Related CVEsby mentions

CVE-2026-767089.8—

A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for…

published 4d ago· arubanetworks analytics and location engine

CVE-2026-767099.8—

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE)

published 4d ago

CVE-2026-767117.5—

A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections

published 4d ago

CVE-2026-767107.5—

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information

published 4d ago

CVE-2026-767127.3—

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service

published 4d ago

CVE-2026-767147.2—

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host

published 4d ago

CVE-2026-767137.2—

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE)

published 4d ago

CVE-2026-767157.1—

A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack

published 4d ago

CVE-2026-767165.3—

Unauthenticated DoS/Access Flaws in HPE Networking Analytics and Location Engine (ALE)

published 4d ago· HPE (HPE Networking / Aruba) Analytics and Location Engine (ALE)

CVE-2026-767175.3—

Unauthenticated Info Disclosure in HPE Networking Analytics and Location Engine (ALE)

published 4d ago· HPE (HPE Aruba Networking) Analytics and Location Engine (ALE) API

HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access

HPE patched ten Analytics Engine flaws, including unauthenticated bugs that can give attackers root.

HPE advisory HPESBNW05137 covers 10 vulnerabilities in Networking Analytics and Location Engine versions 5.0.0.0 and earlier, used with ArubaOS Wi-Fi controllers and gateways. CVE-2026-76708 and CVE-2026-76709, both CVSS 9.8, allow unauthenticated remote access via hard-coded credentials and arbitrary elevated file writes. Authenticated flaws CVE-2026-76713 and CVE-2026-76714 can provide root filesystem access or root command execution. HPE said it knew of no public exploit code and advised restricting CLI and web management access until patches are applied.

GBHackersSep 23, 11:47 UTC · 4d agoVulnerability CVE-2026-76708 CVE-2026-76709 CVE-2026-76710+7 CVEs

ArubaOS

Timeline1 articles

Related CVEsby mentions

Appears with

HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access