CVE-2026-0784CWE-78

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
7.2
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

🚨 A simple command injected through the UI is all it takes for an attacker to execute arbitrary code on your ALGO 8180 IP Audio Alerter device! 🔥 Imagine a restaurant where the chef prepares any dish a customer orders without checking the ingredients first — the potential for disaster is huge! This vulnerability allows attackers to slip in malicious commands without any verification before the system cooks them up. If exploited, a malicious actor could run arbitrary code on your device, potentially compromising the entire system and causing chaos in your audio alerts. The consequences could range from unauthorized access to sensitive data to complete control over the device's functionality, making a once-secure environment feel alarmingly vulnerable.

Put simply

Imagine a restaurant where the chef prepares any dish a customer orders without checking the ingredients first — the potential for disaster is huge! This vulnerability allows attackers to slip in malicious commands without any verification before the system cooks them up. This command injection vulnerability stems from insufficient validation of user inputs in the web interface, allowing attackers with authentication to execute system calls using crafted strings.

What to do

If exploited, a malicious actor could run arbitrary code on your device, potentially compromising the entire system and causing chaos in your audio alerts. The consequences could range from unauthorized access to sensitive data to complete control over the device's functionality, making a once-secure environment feel alarmingly vulnerable. To safeguard against this vulnerability, ensure that your ALGO 8180 device is updated to the latest firmware. Implement strict input validation to sanitize user-supplied strings and regularly audit your system's security configuration. Don't forget to educate your users about secure practices as well! You've got this! With proactive measures in place, you can protect your device and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01642 · 76.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-01-23T02:58Z
EPSS history
Timeline
  • 23 JAN 02:58Z
    ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
    cvelistv5