CVE-2026-76709: arubanetworks analytics_and_location_engine

CVSS 9.8 (critical) · published 2026-09-22

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

Affected products (NVD): arubanetworks analytics_and_location_engine

Fixed in (NVD): 5.1.0.0

Weakness: CWE-284

Source: NVD CVE-2026-76709

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.