Remote Code Execution Vulnerability in HPE Analytics and Location Engine
CVE-2026-76711

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
Ale
Vendor
CVE Published:
22 September 2026

What is CVE-2026-76711?

The Analytics and Location Engine (ALE) component from Hewlett Packard Enterprise suffers from a vulnerability that allows an unauthenticated remote attacker to manipulate the process handling incoming socket connections. By sending specially crafted inputs during the connection initiation phase, the attacker may successfully inject unauthorized data into the system, potentially compromising its integrity. This highlights the importance of securing input channels to prevent exploitation by malicious actors.

Affected Version(s)

ALE 0.0.0.0 <= 5.0.0.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.