CVE-2026-76715 — Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and…

CVE-2026-76715

Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE) PUBLISHED

Description (CNA)

A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ALE	affected 0.0.0.0 through 5.0.0.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.