Unauthorized Write Access in HPE Analytics and Location Engine
CVE-2026-76709

9.8CRITICAL

Key Information:

Vendor

HP (HP)

Status
Ale
Vendor
CVE Published:
22 September 2026

What is CVE-2026-76709?

A serious vulnerability in the internal administrative component of HPE's Analytics and Location Engine allows an unauthenticated remote attacker to exploit the system. This can result in unauthorized write access to the file system with elevated privileges, which may lead to a complete compromise of the system. Proper security measures and updates are crucial to mitigate potential threats from this vulnerability.

Affected Version(s)

ALE 0.0.0.0 <= 5.0.0.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.