CVE-2026-76711 — Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)

CVE-2026-76711

Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE) PUBLISHED

Description (CNA)

A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful exploitation could result in unauthorized data injection.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ALE	affected 0.0.0.0 through 5.0.0.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.