TL;DR

Unauthenticated attackers can inject commands and execute arbitrary code on ALGO 8180 IP Audio Alerters due to a critical vulnerability (CVE-2026-0787).

What happened

['ALGO 8180 IP Audio Alerter devices are exposed to command injection that allows remote execution of arbitrary code without authentication.', 'CVSS rating is 8.1 indicating high severity and exploitability.']

Why it matters for ops

['Attackers can leverage this vulnerability to execute malicious commands on the device, potentially leading to full control over affected systems.']

Mitigation

  • Apply available firmware updates immediately.
  • Isolate impacted devices until mitigation is applied.

Action items

  • Check for available firmware updates and apply them as soon as possible.
  • Monitor network traffic and system logs for any suspicious activities related to the affected device.

Detection IOCs

  • Unexpected command execution logs
  • Sudden network activity originating from ALGO devices

Source link

http://www.zerodayinitiative.com/advisories/ZDI-26-009/