Advisoriesby IbisHewlett Packard EnterpriseCVE-2026-76713
Hewlett Packard Enterprise ALE: improper privilege management
No fix yet
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full system compromise.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ALE Product | >= 0.0.0.0, <= 5.0.0.0 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-269