5.3
Medium
CVE-2026-76717 A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive…
Description
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input to a specific API endpoint. Successful exploitation could result in the disclosure of sensitive user information, including password hashes, which could be used to facilitate further attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ALE 0.0 | 0.0.0.0 → 5.0.0.0 | No fix stated |
Other CVEs of ALE
The 10 CVEs of ALE →
CVE-2026-76716
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or…
5.3
Medium
CVE-2026-76715
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a…
7.1
High
CVE-2026-76714
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary…
7.2
High
CVE-2026-76713
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE)
7.2
High