CVE-2026-76709

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting in full system compromise.

  • Published Sep 22, 2026
  • CVSS 9.8 critical
  • 0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

In the news

CVE-2026-76709 at the National Vulnerability Database