Skip to content
OpenAdvisories
High · 7.2 CVE-2026-76714 EUVD-2026-84674GHSA-m7jf-8pvj-2r6w

Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)

Published Sep 22, 2026 · Updated Sep 22, 2026 · Assigned by hpe

Description

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ALE 0.0.0.0 – ≤ 5.0.0.0 —

References