CVE-2026-76709

critical · 9.8

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

9.8

CVSS

0.7%

EPSS (exploit prob.)

50th

EPSS percentile

2026-09-22

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-284

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-76709