Man-in-the-Middle Vulnerability in HPE Analytics and Location Engine
CVE-2026-76715

7.1HIGH

Key Information:

Vendor

HP (HP)

Status
Ale
Vendor
CVE Published:
22 September 2026

What is CVE-2026-76715?

A significant vulnerability exists within the administrative component of Hewlett Packard Enterprise's Analytics and Location Engine. This flaw enables attackers to potentially conduct man-in-the-middle attacks, compromising the confidentiality and integrity of data transmission. If exploited, it may allow unauthorized remote entities to execute arbitrary code with root privileges on the affected systems, raising serious security concerns for organizations utilizing this appliance.

Affected Version(s)

ALE 0.0.0.0 <= 5.0.0.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.