A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US | Vendor Advisory |
Configurations
History
28 Sep 2026, 14:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US - Vendor Advisory | |
| First Time |
Arubanetworks
Arubanetworks analytics And Location Engine |
|
| CPE | cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:* |
22 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-22 20:17
Updated : 2026-09-28 14:07
NVD link : CVE-2026-76715
Mitre link : CVE-2026-76715
CVE.ORG link : CVE-2026-76715
JSON object : View
Products Affected
arubanetworks
- analytics_and_location_engine
CWE
CWE-300
Channel Accessible by Non-Endpoint