CVE-2026-76714: Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)
Published Sep 22, 2026
·Updated
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected Software
1 affected component
HPE Networking Analytics and Location Engine (ALE)
Event History
Sep 22, 2026
CVE Published
via MITRE·07:12 PM
Data Sourced
via MITRE·07:12 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker must be able to authenticate to the ALE web interface. No user interaction is required.
2
What is the impact of successful exploitation?
A successful attacker can execute arbitrary commands as root on the underlying operating system, resulting in complete system compromise.
3
Can this be exploited remotely?
Yes. The vulnerability is remotely exploitable through the ALE web interface by an authenticated user.