OPS INTEL

HIGH 95% confidence cve

(0Day) ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ZDI reports a critical command injection RCE vulnerability in the ALGO 8180 IP Audio Alerter, requiring authentication but posing significant risks. Includes se

['Requires authentication, but once authenticated attackers have significant control over the device', 'Potential for data exfiltration and system compromise']

ALGO 8180 IP Audio Alerter users

action items (2)

• Update firmware and software on ALGO 8180 devices
• Review system configurations for enhanced security practices

Zero Day Initiative · 2026-03-19 06:57

HIGH 95% confidence cve

(0Day) ALGO 8180 IP Audio Alerter Web UI Command Injection RCE Vulnerability

ALGO 8180 IP Audio Alerter devices are vulnerable to command injection leading to remote code execution. Authentication is required. Includes severity, confiden

['Remote code execution can lead to full control of the device.', 'Sensitive data and system integrity may be compromised.']

ALGO 8180 IP Audio Alerter

action items (2)

• Update to the latest firmware version as soon as it is available.
• Review and restrict access controls for web UI.

Zero Day Initiative · 2026-03-19 06:57

HIGH 95% confidence cve

(0Day) ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ZDI-26-005: Exploit for ALGO 8180 devices allowing remote attackers to execute arbitrary code with authentication. CVE-2026-0783, CVSS rating 7.2. Includes seve

['Inadequate input validation allows for command injection', 'Authentication is required, but not sufficient to prevent exploitation']

IT administratorsNetwork security professionals

action items (2)

• Update ALGO 8180 firmware to latest version
• Implement strict access control policies for affected devices

Zero Day Initiative · 2026-03-19 06:57

HIGH 95% confidence cve

(0Day) ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter devices are vulnerable to command injection and remote code execution via the web UI. Authenticated attackers can exploit this flaw.

['Impact: Unauthorized access and potential system compromise', 'Attack vector: Remote authenticated users via web UI']

ALGO 8180 IP Audio Alerter users

action items (2)

• Update affected devices immediately
• Monitor for suspicious activities related to web interface usage

Zero Day Initiative · 2026-03-19 06:57

HIGH 90% confidence cve

(0Day) ALGO 8180 IP Audio Alerter API Command Injection RCE Vulnerability

Remote attackers can execute arbitrary code on ALGO 8180 IP Audio Alerters with required auth, CVSS rating: 7.5. Includes severity, confidence, and actionable r

['Critical infrastructure needs protection against RCE vulnerabilities', 'Command injection poses significant risk for unauthorized access and control']

IT administratorsNetwork security professionals

action items (2)

• Patch affected systems as soon as updates are available
• Monitor for unusual network activity related to this vulnerability

Zero Day Initiative · 2026-03-19 06:57