# CVE-2026-76712: HP Analytics and Location Engine unauthorized access and denial of service

Source: https://junglewise.ai/threats/cve-2026-76712-a-vulnerability-exists-in-the-analytics-and-location-engine-ale  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-22. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-76712 · Severity: high · CVSS 7.3 · Published 2026-09-22

HP's Analytics and Location Engine (ALE) is a network location and analytics platform used in enterprise environments. A vulnerability allows unauthenticated remote attackers to gain unauthorized access, disclose sensitive information, or disrupt service availability by sending specially crafted network requests. Successful exploitation could expose location data, bypass security controls, or cause service outages.

Vendors: [Hp](https://junglewise.ai/threats/vendors/hp).

## Quick answers

**Is CVE-2026-76712 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76712 being exploited in the wild.

**How severe is CVE-2026-76712?** High severity, with a CVSS score of 7.3, published 22 September 2026.

**Which products and versions are affected?** HP Analytics and Location Engine.

**Is there a fix for CVE-2026-76712?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-76712 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-76712?** Check whether you run Hp Analytics and Location Engine. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An unauthenticated remote vulnerability in Analytics and Location Engine (ALE) permits attackers to send specially crafted input or intercept network communications to achieve unauthorized access, information disclosure, or denial of service. The vulnerability is exploitable over the network without authentication or user interaction. Exploitation results in disclosure of sensitive data, security control bypass, or service unavailability.

## Affected products

- HP Analytics and Location Engine

## Timeline

- 2026-09-22: disclosed

## References

- [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US](https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US)