Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US | Vendor Advisory |
Configurations
History
28 Sep 2026, 14:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Arubanetworks
Arubanetworks analytics And Location Engine |
|
| CPE | cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:* | |
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US - Vendor Advisory |
22 Sep 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-78 |
22 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-22 20:17
Updated : 2026-09-28 14:07
NVD link : CVE-2026-76714
Mitre link : CVE-2026-76714
CVE.ORG link : CVE-2026-76714
JSON object : View
Products Affected
arubanetworks
- analytics_and_location_engine
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')