Skip to content

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service.

High7.3CVE-2026-76712 · Published Sep 22, 2026 · updated Sep 23, 2026

Source advisory

Affected versions

PackageAffectedFixed in
ALE
Vendor
>= 0.0.0.0, <= 5.0.0.0No fix yet
Details and references

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote attacker could exploit the vulnerable system by sending specially crafted input or intercepting network communications. Successful exploitation could result in the disclosure of sensitive information, bypass of security controls, or a denial of service condition on the affected system.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Severity from
no source yet
Weakness
CWE-200

More hewlett-packard-enterprise advisories

All

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.