CVE-2026-0783

Unknown Unknown - Not Provided

Command Injection in ALGO 8180 Web UI Enables Remote Code Execution

Publication date: 2026-01-23

Last updated on: 2026-02-13

Assigner: Zero Day Initiative

Description

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28292.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-23

Last Modified

2026-02-13

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2026-0783

EUVD

EUVD-2026-4473

Affected Vendors & Products

Vendor	Product	Version / Range
algosolutions	8180_ip_audio_alerter_firmware	5.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a remote code execution flaw in the ALGO 8180 IP Audio Alerter device's web-based user interface. It occurs because the device does not properly validate a user-supplied string before using it in a system call. An authenticated remote attacker can exploit this to execute arbitrary code with the device's privileges. [1]

Impact Analysis

Exploiting this vulnerability allows an authenticated attacker to execute arbitrary code on the affected device, potentially compromising its confidentiality, integrity, and availability. This could lead to unauthorized control over the device and disruption of its normal operations. [1]

Mitigation Strategies

To mitigate this vulnerability, ensure that access to the ALGO 8180 IP Audio Alerter web interface is restricted to trusted and authenticated users only, as exploitation requires authentication. Apply any available patches or updates from the vendor that address this issue. Additionally, monitor and limit network access to the device's management interface to reduce exposure. [1]

Hi! I’m here to help you understand CVE-2026-0783. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70