CVE-2026-76716CWE-770denial-of-service

CVE-2026-76716

Medium · published September 23, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful exploitation could result in a denial of service condition or unauthorized access to sensitive information.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-09-23T00:17Z
Affected products (1)
ProductVersionsFixed in
arubanetworks/analytics_and_location_engine< 5.1.0.05.1.0.0
References (1)
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 1%
    epss
  • 22 SEP 19:12Z
    Unauthenticated Remote Unauthorized Access and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)
    cvelistv5