OPS INTEL

HIGH 90% confidence cve

(0Day) ALGO 8180 IP Audio Alerter SCI Command Injection Vulnerability

ALGO 8180 IP Audio Alerter devices are vulnerable to remote code execution due to a command injection flaw. Requires authentication, CVSS rating of 7.5. Include

['Exploitation requires authentication, but could lead to full system compromise', 'Vulnerability can be used to bypass security measures']

ALGO 8180 IP Audio Alerter usersNetwork administrators responsible for audio alerting systems

action items (3)

• Apply security updates immediately
• Review access control policies for ALGO devices
• Deploy network monitoring tools to detect suspicious activity

Zero Day Initiative · 2026-03-19 06:57

CRITICAL 95% confidence cve

ZDI-26-009 ALGO 8180 IP Audio Alerter SAC Command Injection RCE

ALGO 8180 IP Audio Alerter devices are vulnerable to command injection leading to remote code execution. No authentication required, CVSS rating 8.1. Includes s

['Attackers can leverage this vulnerability to execute malicious commands on the device, potentially leading to full control over affected systems.']

Network securityDevice management

action items (2)

• Check for available firmware updates and apply them as soon as possible.
• Monitor network traffic and system logs for any suspicious activities related to the affected device.

Zero Day Initiative · 2026-03-19 06:57

CRITICAL 95% confidence cve

npm cli Local Privilege Escalation Vulnerability (CVE-2026-0775)

Critical vulnerability in npm cli allowing local attackers to escalate privileges. CVSS rating: 7.8. Includes severity, confidence, and actionable response guid

['npm cli versions are vulnerable if they do not have proper mitigations against uncontrolled search path elements.', 'Attackers may exploit this flaw to elevate their privileges on systems running affected npm cli insta

npm cli users and administrators

action items (2)

• Immediately update npm cli installations to mitigate CVE-2026-0775
• Review logs for suspicious activity related to low-privilege commands escalating privileges

Zero Day Initiative · 2026-02-27T06:14

HIGH 90% confidence cve

CISA Adds CVE-2025-8110 to Known Exploited Vulnerability Catalog

['CISA adds Gogs Path Traversal Vulnerability (CVE-2025-8110) to its KEV catalog, emphasizing the importance of timely remediation for federal agencies and all.

['The inclusion of CVE-2025-8110 in the KEV catalog signifies active exploitation and potential harm, necessitating prompt action from organizations, particularly FCEB agencies, to mitigate risks.']

Federal Civilian Executive Branch (FCEB) agenciesAll organizations handling sensitive data

action items (3)

• Review and prioritize remediation efforts for CVE-2025-8110
• Update system configurations and apply necessary patches
• Conduct a thorough risk assessment post-remediation

CISA Current Activity · 2026-02-27T04:44

MEDIUM 95% confidence advisory

Fall 2025 PCI DSS Compliance Package Update

['AWS adds new services and regions to PCI DSS compliance, enhancing security for global operations.', 'AWS expands PCI DSS certification with AWS Security.

['This expansion helps customers achieve compliance with PCI DSS standards, ensuring secure processing and storage of cardholder data across more regions and services.', 'It provides enhanced capabilities for incident re

Financial ServicesRetailTechnology

action items (2)

• Update configurations and compliance checks to include newly certified AWS services and region
• Consult AWS documentation for the latest guidance on PCI DSS requirements

AWS Security Blog · 2026-02-27T04:43