EUVD-2026-84671

A vulnerability exists in an Analytics and Location Engine ALE component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful...

EUVD-2026-84670

A vulnerability exists in the Analytics and Location Engine ALE management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful...

CVE-2026-76710

A vulnerability in the HPE Networking Analytics and Location Engine (ALE) management interface allows an unauthenticated remote attacker to disclose sensitive information. By sending specially crafted requests to specific internal endpoints, an attacker can gain access to site hierarchy , infrast...

CVE-2026-76709

A vulnerability exists in the internal administrative component of the HPE Networking Analytics and Location Engine (ALE) . This flaw allows an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges . Successful exploitation could lead to a f...

EUVD-2026-84668

A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...

CVE-2026-76708

A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) because the application and its underlying operating system utilize default, hard-coded credentials for multiple administrative and system accounts. An unauthenticated remote attacker can exploit this by logging in w...

CERTFR-2026-ALE-010

creationtimestamp| type| source ---|---|--- 2026-09-10 16:04:28+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117247591357513667 2026-09-11 05:56:55+00:00| seen| https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p 2026-09-12 05:59:52+00:00| seen|...

CERTFR-2026-ALE-009

creationtimestamp| type| source ---|---|--- 2026-09-02 12:52:04+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117201536283272602 2026-09-02 17:08:53+00:00| seen| https://bsky.app/profile/bot-de-florian.bsky.social/post/3mukgfjrw4n2p 2026-09-06 05:56:59+00:00| seen|...

CERTFR-2026-ALE-007

creationtimestamp| type| source ---|---|--- 2026-07-20 08:52:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116951452309188132...

CERTFR-2026-ALE-006

creationtimestamp| type| source ---|---|--- 2026-07-15 14:21:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116924433303774121...

CERTFR-2026-ALE-002

creationtimestamp| type| source ---|---|--- 2026-02-26 14:39:40+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mfrgfmqiah2k...

CERTFR-2025-ALE-014

creationtimestamp| type| source ---|---|--- 2025-12-05 10:25:20+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115666473271240932...

CERTFR-2025-ALE-012

creationtimestamp| type| source ---|---|--- 2025-08-26 14:27:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115095531158127870 2025-12-05 10:11:20+00:00| patched|...

CERTFR-2024-ALE-013

creationtimestamp| type| source ---|---|--- 2025-03-11 20:37:58+00:00| seen| https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823...

CERTFR-2022-ALE-004

creationtimestamp| type| source ---|---|--- 2025-01-29 16:42:35+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzm5n3c27...

CERTFR-2019-ALE-009

creationtimestamp| type| source ---|---|--- 2025-01-29 16:30:18+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfdmifgf2q...

CERTFR-2017-ALE-002

creationtimestamp| type| source ---|---|--- 2025-01-29 16:20:13+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgverlo5rc24...

LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

...

CVE-2024-50111 LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if doale triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled context such as user mode, in this case doale may call getuser which may cause sleep. Then we will get: BU...

PT-2024-33944

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: The issue is related to the Linux kernel, specifically the LoongArch architecture, where an unaligned access exception can be triggered in an irq-enabled context, such as user mode. This can...