A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful exploitation could result in unauthorized data injection.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US | Vendor Advisory |
Configurations
History
28 Sep 2026, 14:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:* | |
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US - Vendor Advisory | |
| First Time |
Arubanetworks
Arubanetworks analytics And Location Engine |
23 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 |
22 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-22 20:17
Updated : 2026-09-28 14:06
NVD link : CVE-2026-76711
Mitre link : CVE-2026-76711
CVE.ORG link : CVE-2026-76711
JSON object : View
Products Affected
arubanetworks
- analytics_and_location_engine
CWE
CWE-20
Improper Input Validation