CVE-2026-0789

Unknown Unknown - Not Provided

Information Disclosure via Authentication Cookie in ALGO 8180 Web UI

Publication date: 2026-01-23

Last updated on: 2026-02-13

Assigner: Zero Day Initiative

Description

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper management of sensitive information. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28297.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-23

Last Modified

2026-02-13

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-04

NVD

CVE-2026-0789

EUVD

EUVD-2026-4437

Affected Vendors & Products

Vendor	Product	Version / Range
algosolutions	8180_ip_audio_alerter_firmware	5.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure flaw in the ALGO 8180 IP Audio Alerter device's web-based user interface. Specifically, an authentication cookie is improperly included in the response body, allowing remote attackers to access sensitive information without needing to authenticate. The flaw arises from poor management of sensitive data within the device's web UI. [1]

Impact Analysis

An attacker can remotely exploit this vulnerability to disclose sensitive information from the affected device without any authentication. While it does not affect the integrity or availability of the device, it can lead to limited confidentiality loss, potentially exposing sensitive data that could be leveraged for further attacks or unauthorized access. [1]

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-0789. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70