Skip to content

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE).

Critical9.8CVE-2026-76709 · Published Sep 22, 2026 · updated Sep 23, 2026

Source advisory

Affected versions

PackageAffectedFixed in
ALE
Vendor
>= 0.0.0.0, <= 5.0.0.0No fix yet
Details and references

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
no source yet
Weakness
CWE-284

More hewlett-packard-enterprise advisories

All

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.