CVE-2026-76709

Critical9.8 Published on Sep 22, 2026

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)CWE-284
Vendorsarubanetworks

Affected products

VendorsProductVersions
arubanetworksanalytics and location engine< 5.1.0.0

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database