CVE-2026-0791
Unknown Unknown - Not Provided
Stack-Based Buffer Overflow in ALGO 8180 IP Audio Alerter Enables RCE

Publication date: 2026-01-23

Last updated on: 2026-02-18

Assigner: Zero Day Initiative

Description
ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Replaces header of SIP INVITE requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28300.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-23
Last Modified
2026-02-18
Generated
2026-06-16
AI Q&A
2026-01-24
EPSS Evaluated
2026-06-14
NVD
CVE-2026-0791
EUVD
EUVD-2026-4441
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
algosolutions 8180_ip_audio_alerter_firmware 5.5
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The vulnerability allows remote attackers to execute arbitrary code without authentication, which can lead to full compromise of the device's confidentiality, integrity, and availability. Such a compromise could result in unauthorized access to sensitive data or disruption of services, potentially causing non-compliance with standards and regulations like GDPR and HIPAA that require protection of personal and sensitive information and maintaining system integrity and availability. [1]

Executive Summary

This vulnerability is a stack-based buffer overflow in the ALGO 8180 IP Audio Alerter device. It occurs due to improper validation of the length of user-supplied data in the Replaces header of SIP INVITE requests. Because the device copies this data into a fixed-length stack buffer without proper checks, an attacker can overflow the buffer and execute arbitrary code remotely without needing authentication. [1]

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary code on the affected ALGO 8180 IP Audio Alerter device without authentication. This can lead to full compromise of the device, impacting confidentiality, integrity, and availability of the system and potentially the network it is connected to. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0791. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart