CVE-2026-0792CWE-121

ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
8.1
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in the ALGO 8180 IP Audio Alerter could let attackers execute arbitrary code without any authentication! 🔥 Think of it like someone slipping a fake order into the restaurant's system without the chefs checking the incoming requests — that sneaky order could lead to disastrous results in the kitchen! If exploited, an attacker could gain control over the device, potentially altering its functionality, leaking sensitive information, or even launching further attacks on your network. This is absolutely devastating for any organization relying on the device for communication!

Put simply

Think of it like someone slipping a fake order into the restaurant's system without the chefs checking the incoming requests — that sneaky order could lead to disastrous results in the kitchen! The vulnerability arises from improper validation of user-supplied data in the Alert-Info header of SIP INVITE requests. This allows attackers to overwrite a fixed-length stack buffer, leading to remote code execution in the device's context.

What to do

If exploited, an attacker could gain control over the device, potentially altering its functionality, leaking sensitive information, or even launching further attacks on your network. This is absolutely devastating for any organization relying on the device for communication! To protect against this vulnerability, immediately patch your ALGO 8180 devices to the latest firmware version. Regularly audit your devices and ensure they’re configured following best security practices to minimize risks. Keep an eye on updates from the vendor! You've got this! By staying vigilant and taking action, you can secure your devices and maintain your network's integrity. 🛡️

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00709 · 52.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-01-23T03:01Z
EPSS history
Timeline
  • 23 JAN 03:01Z
    ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability
    cvelistv5