CVE-2026-76716
Received Received - Intake

Unauthenticated Remote DoS in HPE Analytics Engine

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: Hewlett Packard Enterprise (HPE)

Description
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful exploitation could result in a denial of service condition or unauthorized access to sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-23
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-76716
EUVD
EUVD-2026-84676

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves multiple flaws in the Analytics and Location Engine (ALE) that could allow unauthorized access or denial of service. An attacker could exploit these by sending specially crafted input or exploiting weak security settings without authentication.

Impact Analysis

Exploitation could lead to denial of service, disrupting services, or unauthorized access to sensitive information. This may affect system availability and data confidentiality.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive information, which may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information. The denial of service condition could also disrupt compliance with availability requirements in these regulations.

Mitigation Strategies

Apply security patches or updates provided by the vendor for the Analytics and Location Engine (ALE). Ensure proper security configurations are enforced to prevent unauthorized access or denial of service. Monitor network traffic for unusual activity or crafted input attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76716. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart