Skip to content
Threat Feed
Subscribe
high advisory

Multiple Vulnerabilities in HPE Aruba Analytics and Location Engine

Multiple high-severity vulnerabilities in HPE Aruba Analytics and Location Engine (ALE) allow for remote code execution, privilege escalation, and denial-of-service.

CVE search metadata

CVE search record: CVE-2026-76708. Severity: critical. CVSS: 9.8. KEV: no. Brief: Multiple Vulnerabilities in HPE Aruba Analytics and Location Engine. Brief link: https://feed.craftedsignal.io/briefs/2026-09-hpe-aruba-vulns/

CVE search record: CVE-2026-76717. Severity: medium. CVSS: 5.3. KEV: no. Brief: Multiple Vulnerabilities in HPE Aruba Analytics and Location Engine. Brief link: https://feed.craftedsignal.io/briefs/2026-09-hpe-aruba-vulns/

HPE Aruba Networking has released security bulletin HPESBNW05137 addressing multiple vulnerabilities identified in the Analytics and Location Engine (ALE) software. These vulnerabilities, tracked under CVE-2026-76708 through CVE-2026-76717, affect all versions prior to 5.1.0.0. An unauthenticated attacker could potentially exploit these flaws to achieve remote code execution (RCE), escalate privileges to gain full administrative control, or trigger a remote denial-of-service (DoS) condition on affected infrastructure. Given the critical