1. Home
  2. CVE Database
  3. CVE-2026-76710
HIGH · 7.5

CVE-2026-76710

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this...

Vulnerability Description

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful exploitation could result in the disclosure of sensitive site hierarchy, infrastructure details, and client device information.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksAnalytics And Location Engine< 5.1.0.0

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2026-76710?

CVE-2026-76710 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this...

How severe is CVE-2026-76710?

CVE-2026-76710 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-76710?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Analytics And Location Engine.