9.8
Critique
CVE-2026-76708 A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating…
Description
A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in using these known default credentials. Successful exploitation could result in an attacker gaining unauthorized access to the application's management interface and the underlying operating system, potentially leading to full system compromise.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ALE 0.0 | 0.0.0.0 → 5.0.0.0 | Pas de correctif indiqué |
Autres CVE de ALE
Les 10 CVE de ALE →
CVE-2026-76717
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive…
5.3
Moyenne
CVE-2026-76716
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or…
5.3
Moyenne
CVE-2026-76715
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a…
7.1
Élevée
CVE-2026-76714
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary…
7.2
Élevée