CVE-2026-76715

7.1 highEPSS 0.3%

High (7.1) in arubanetworks analytics and location engine. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-300
Published: 2026-09-22
Modified: 2026-09-28
Record from: the NVD, synced 2026-10-19

Affected

arubanetworks:analytics_and_location_engine

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

Check your stack JSON