CVE-2026-0783CWE-78

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
7.2
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

🚨 A remote attacker could execute arbitrary code on your ALGO 8180 IP Audio Alerter simply by exploiting a sneaky command injection flaw in the web UI! ⚡ Think of a restaurant where the chef blindly follows any special request without checking if it’s safe. That’s how this vulnerability lets attackers slip in malicious commands without proper validation — a recipe for disaster! If exploited, an attacker could gain full control of the device, manipulating it to run any code, potentially leading to unauthorized access to your network or tampering with audio outputs. This could be a seriously damaging breach, affecting not just the device, but possibly other systems connected to it!

Put simply

Think of a restaurant where the chef blindly follows any special request without checking if it’s safe. That’s how this vulnerability lets attackers slip in malicious commands without proper validation — a recipe for disaster! The flaw stems from the web UI not validating user inputs before using them in system calls, allowing a malicious user to inject harmful commands that the device executes in its context.

What to do

If exploited, an attacker could gain full control of the device, manipulating it to run any code, potentially leading to unauthorized access to your network or tampering with audio outputs. This could be a seriously damaging breach, affecting not just the device, but possibly other systems connected to it! To protect your devices, ensure you update to the latest firmware that addresses this vulnerability. Additionally, review user authentication measures and limit access to trusted personnel only. Regular audits of your system can also help catch potential issues before they can be exploited. You've got this! By following these steps, you can secure your ALGO 8180 and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01642 · 76.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-01-23T02:58Z
EPSS history
Timeline
  • 23 JAN 02:58Z
    ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
    cvelistv5