CVE-2026-0795CWE-78

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
7.2
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

⚡ A crafty command injection vulnerability lets an attacker execute arbitrary code on ALGO 8180 IP Audio Alerter devices! 🔥 Just imagine the chaos that could ensue! Think of this as a restaurant where a diner can sneak into the kitchen by convincing the staff their special request is legitimate — except this time, they’re cooking up anything they want right on the menu! If exploited, attackers could execute harmful commands, potentially compromising sensitive information or taking full control of the device. This could lead to a situation where the device is used against its owner, creating a cybersecurity nightmare!

Put simply

Think of this as a restaurant where a diner can sneak into the kitchen by convincing the staff their special request is legitimate — except this time, they’re cooking up anything they want right on the menu! This vulnerability stems from the web UI's failure to properly validate user input before executing system commands, allowing authenticated attackers to run arbitrary code on the device.

What to do

If exploited, attackers could execute harmful commands, potentially compromising sensitive information or taking full control of the device. This could lead to a situation where the device is used against its owner, creating a cybersecurity nightmare! To protect your system, ensure that your ALGO 8180 devices are updated to the latest firmware version as provided by the manufacturer. Regularly review user permissions and audit any access logs for suspicious activity. 🛡️ You've got this! With these steps, you'll be on your way to securing your devices in no time! 💪✨

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01459 · 73.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-01-23T03:01Z
EPSS history
Timeline
  • 23 JAN 03:01Z
    ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
    cvelistv5