CVE-2026-76712: arubanetworks analytics_and_location_engine

Vulnerability summary

CVE-2026-76712 is a high (CVSS 7.3) vulnerability in arubanetworks analytics_and_location_engine. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.5% of scored vulnerabilities.

Timeline

1. 22-09-2026
   PublishedVulnerability first disclosed.
2. 22-09-2026
   Last modifiedVulnerability information updated.

Description

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote attacker could exploit the vulnerable system by sending specially crafted input or intercepting network communications. Successful exploitation could result in the disclosure of sensitive information, bypass of security controls, or a denial of service condition on the affected system.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.