CVE-2026-0789

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0789", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-01-08T22:55:36.577Z", "datePublished": "2026-01-23T03:01:16.956Z", "dateUpdated": "2026-01-23T19:39:25.056Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:01:16.956Z"}, "title": "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability", "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper management of sensitive information. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28297."}], "affected": [{"vendor": "ALGO", "product": "8180 IP Audio Alerter", "versions": [{"version": "5.5", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-011/", "name": "ZDI-26-011", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:55:36.599Z", "datePublic": "2026-01-09T15:55:23.355Z", "source": {"lang": "en", "value": "Vera Mensa of Claroty Research - Team82"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-23T19:39:13.770947Z", "id": "CVE-2026-0789", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T19:39:25.056Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0789", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-23T19:39:13.770947Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T19:39:21.693Z"}}], "cna": {"title": "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability", "source": {"lang": "en", "value": "Vera Mensa of Claroty Research - Team82"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "ALGO", "product": "8180 IP Audio Alerter", "versions": [{"status": "affected", "version": "5.5"}], "defaultStatus": "unknown"}], "datePublic": "2026-01-09T15:55:23.355Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-011/", "name": "ZDI-26-011", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:55:36.599Z", "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper management of sensitive information. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28297."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:01:16.956Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0789", "state": "PUBLISHED", "dateUpdated": "2026-01-23T19:39:25.056Z", "dateReserved": "2026-01-08T22:55:36.577Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-01-23T03:01:16.956Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "8180 IP Audio Alerter", "vendor": "ALGO", "versions": [{"status": "affected", "version": "5.5"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "853BF5C9-122B-4F47-9CE7-DA3E307130ED", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A20E73F-D499-4973-ADDE-8B702E6F5254", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper management of sensitive information. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28297."}, {"lang": "es", "value": "Vulnerabilidad de revelaci\u00f3n de informaci\u00f3n por inclusi\u00f3n de cookie de autenticaci\u00f3n en el cuerpo de la respuesta en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos revelar informaci\u00f3n sensible en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticaci\u00f3n no es requerida para explotar esta vulnerabilidad.\n\nLa falla espec\u00edfica existe dentro de la interfaz de usuario basada en web. El problema resulta de la falta de gesti\u00f3n adecuada de informaci\u00f3n sensible. Un atacante puede aprovechar esta vulnerabilidad para revelar informaci\u00f3n en el contexto del dispositivo. Fue ZDI-CAN-28297."}], "id": "CVE-2026-0789", "lastModified": "2026-06-17T10:11:23.163", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0789", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-23T19:39:13.770947Z", "version": "2.0.3"}}]}, "published": "2026-01-23T04:16:06.580", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-011/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T18:57:14.751968+00:00", "value": {"mitigation_remediation": ["Deploy the latest firmware release or vendor patch that removes the cookie from response bodies, thereby mitigating the CWE\u2011200 information disclosure.", "Restrict network access to the device\u2019s web interface using a firewall or network segmentation so that only trusted networks can reach it.", "Disable or remove the web UI if it is not needed, or enable HTTPS with HSTS and secure cookie flags to prevent cookie leakage."], "summary": {"action": "Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "The vulnerability affects ALGO 8180 IP Audio Alerter hardware with firmware version 5.5; impact on later versions is unconfirmed. The CPE identifiers confirm that the firmware 5.5 is impacted. Organizations operating these devices, especially in public or unprotected networks, are at risk.", "description_and_impact": "The flaw arises from the web UI in ALGO 8180 IP Audio Alerter devices, where an authentication cookie is embedded directly in the body of HTTP responses.\nThis oversight allows a remote attacker, without needing any credentials, to retrieve the cookie, which based on the nature of the cookie could potentially be used for session hijacking or to expose other sensitive data; this is inferred from the description.\nThe vulnerability enables disclosure of confidential device information, violating confidentiality, and is classified as CWE\u2011200 information disclosure.", "risk_and_exploitability": "The CVSS score of 7.5 classifies it as high severity, while the EPSS score of less than 1% indicates a low probability of exploitation at present.\nIt is not listed in the KEV catalog, suggesting no known active exploitation.\nThe attack can be performed over the network by sending a request to the web interface; no authentication is required.\nIt is inferred that the high severity combined with the low exploitation likelihood would place the threat at a moderate to high risk for organizations using vulnerable devices, especially those exposing the web UI to the Internet."}}}}, "created": "2026-01-23T10:27:03.440796+00:00", "updated": "2026-04-18T19:00:08.044400+00:00", "vendors": ["algo", "algo$PRODUCT$8180_ip_audio_alerter"]}