CVE-2026-0790
Information Disclosure in ALGO 8180 IP Audio Alerter Web UI
Publication date: 2026-01-23
Last updated on: 2026-02-13
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| algosolutions | 8180_ip_audio_alerter_firmware | 5.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-425 | The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-0790 is a vulnerability in the ALGO 8180 IP Audio Alerter's web-based user interface that allows remote attackers to disclose sensitive information without requiring authentication. The flaw exists due to improper access controls in the web UI, enabling an attacker to obtain unauthorized data by directly navigating to specific URLs. [1]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing remote attackers to access sensitive information on affected ALGO 8180 IP Audio Alerter devices without any authentication. This unauthorized disclosure could lead to exposure of confidential data, potentially compromising privacy or security of the device environment. However, it does not affect data integrity or availability. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can be performed by attempting to access the vulnerable ALGO 8180 IP Audio Alerter web UI URLs directly without authentication to see if sensitive information is disclosed. Specific commands are not provided in the resources, but using tools like curl or wget to request known vulnerable URLs on the device could help identify the issue. For example, a command like 'curl http://<device-ip>/<vulnerable-path>' might reveal unauthorized data if the device is affected. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps are not detailed in the provided resources. However, general best practices include restricting network access to the ALGO 8180 IP Audio Alerter web interface, applying any available vendor patches or updates, and monitoring for unauthorized access attempts. Since authentication is not required to exploit the vulnerability, limiting exposure of the device to untrusted networks is critical. [1]