CVE-2026-76713

7.2 highEPSS 0.6%

High (7.2) in arubanetworks analytics and location engine. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full system compromise.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2026-09-22
Modified: 2026-09-28
Record from: the NVD, synced 2026-10-19

Affected

arubanetworks:analytics_and_location_engine

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

Check your stack JSON