{"id":"CVE-2026-76708","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-76708","generatedAt":"2026-10-28T00:50:50.338Z","title":"A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts.","description":"A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in using these known default credentials.\n\nSuccessful exploitation could result in an attacker gaining unauthorized access to the application's management interface and the underlying operating system, potentially leading to full system compromise.","published":"2026-09-22T20:17:07.000Z","lastModified":"2026-09-25T18:01:52.000Z","status":"Analyzed","sourceIdentifier":"security-alert@hpe.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-798"],"affected":["arubanetworks/analytics and location engine"],"epss":{"score":0.00594,"percentile":0.48119,"date":"2026-10-26","history":[{"date":"2026-09-23","score":0.0065,"percentile":0.4979}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-22T20:17:07.000Z","detail":{"score":"9.8","severity":"CRITICAL","publishedAt":"2026-09-22T20:17:06.620Z"},"summary":"New CVE, critical severity (CVSS 9.8)."}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US","tags":["Vendor Advisory"],"source":"security-alert@hpe.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76708","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}