Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-76711

Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-76711

Published

A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful exploitation could result in unauthorized data injection.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76711

Published

ALE

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "product": "ALE",
                    "vendor": "Hewlett Packard Enterprise (HPE)",
                    "versions": [
                        {
                            "lessThanOrEqual": "5.0.0.0",
                            "status": "affected",
                            "version": "0.0.0.0",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON