Unauthorized Access Vulnerability in HPE Analytics and Location Engine
CVE-2026-76712

7.3HIGH

Key Information:

Vendor

HP (HP)

Status
Ale
Vendor
CVE Published:
22 September 2026

What is CVE-2026-76712?

A vulnerability exists in HPE's Analytics and Location Engine that could allow unauthenticated remote attackers to gain unauthorized access, leading to potential information disclosure or denial of service. By sending specially crafted input or intercepting network communications, attackers may exploit this weakness. Successful exploitation could enable sensitive information to be disclosed and security controls to be bypassed, resulting in service interruptions.

Affected Version(s)

ALE 0.0.0.0 <= 5.0.0.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.