Skip to content

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE).

High7.2CVE-2026-76713 · Published Sep 22, 2026 · updated Sep 23, 2026

Source advisory

Affected versions

PackageAffectedFixed in
ALE
Vendor
>= 0.0.0.0, <= 5.0.0.0No fix yet
Details and references

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full system compromise.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
no source yet
Weakness
CWE-269

More hewlett-packard-enterprise advisories

All

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.