A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US | Vendor Advisory |
Configurations
History
28 Sep 2026, 14:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US - Vendor Advisory | |
| First Time |
Arubanetworks
Arubanetworks analytics And Location Engine |
|
| CPE | cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:* |
23 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
22 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-22 20:17
Updated : 2026-09-28 14:07
NVD link : CVE-2026-76709
Mitre link : CVE-2026-76709
CVE.ORG link : CVE-2026-76709
JSON object : View
Products Affected
arubanetworks
- analytics_and_location_engine
CWE
CWE-284
Improper Access Control