CVE-2026-76716

Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful exploitation could result in a denial of service condition or unauthorized access to sensitive information.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*

History

28 Sep 2026, 14:07

Type	Values Removed	Values Added
References	~~() https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US -~~	() https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US - Vendor Advisory
CPE		cpe:2.3:a:arubanetworks:analytics_and_location_engine::::::::
First Time		Arubanetworks Arubanetworks analytics And Location Engine

22 Sep 2026, 21:17

Type	Values Removed	Values Added
CWE		CWE-770

22 Sep 2026, 20:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-22 20:17

Updated : 2026-09-28 14:07

NVD link : CVE-2026-76716

Mitre link : CVE-2026-76716

CVE.ORG link : CVE-2026-76716

JSON object : View

Products Affected

arubanetworks

analytics_and_location_engine

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-76716", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76716", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-22T20:02:12.291280Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-alert@hpe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-alert@hpe.com", "affectedData": [{"vendor": "Hewlett Packard Enterprise (HPE)", "product": "ALE", "versions": [{"status": "affected", "version": "0.0.0.0", "versionType": "semver", "lessThanOrEqual": "5.0.0.0"}], "defaultStatus": "affected"}]}], "published": "2026-09-22T20:17:07.607", "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US", "tags": ["Vendor Advisory"], "source": "security-alert@hpe.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful exploitation could result in a denial of service condition or unauthorized access to sensitive information."}], "lastModified": "2026-09-28T14:07:50.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arubanetworks:analytics_and_location_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BF5CD19-1EEB-4CA5-9A41-8C6A1F196579", "versionEndExcluding": "5.1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}