CVE-2026-0790

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0790", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-01-08T22:55:42.415Z", "datePublished": "2026-01-23T03:01:20.618Z", "dateUpdated": "2026-01-23T19:38:42.172Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:01:20.618Z"}, "title": "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability", "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299."}], "affected": [{"vendor": "ALGO", "product": "8180 IP Audio Alerter", "versions": [{"version": "5.5", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-425", "description": "CWE-425: Direct Request ('Forced Browsing')", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-012/", "name": "ZDI-26-012", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:55:42.437Z", "datePublic": "2026-01-09T15:55:29.387Z", "source": {"lang": "en", "value": "Vera Mensa of Claroty Research - Team82"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-23T19:38:29.941998Z", "id": "CVE-2026-0790", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T19:38:42.172Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0790", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-23T19:38:29.941998Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T19:38:37.368Z"}}], "cna": {"title": "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability", "source": {"lang": "en", "value": "Vera Mensa of Claroty Research - Team82"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "ALGO", "product": "8180 IP Audio Alerter", "versions": [{"status": "affected", "version": "5.5"}], "defaultStatus": "unknown"}], "datePublic": "2026-01-09T15:55:29.387Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-012/", "name": "ZDI-26-012", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:55:42.437Z", "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-425", "description": "CWE-425: Direct Request ('Forced Browsing')"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:01:20.618Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0790", "state": "PUBLISHED", "dateUpdated": "2026-01-23T19:38:42.172Z", "dateReserved": "2026-01-08T22:55:42.415Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-01-23T03:01:20.618Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "8180 IP Audio Alerter", "vendor": "ALGO", "versions": [{"status": "affected", "version": "5.5"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "853BF5C9-122B-4F47-9CE7-DA3E307130ED", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A20E73F-D499-4973-ADDE-8B702E6F5254", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299."}, {"lang": "es", "value": "Vulnerabilidad de revelaci\u00f3n de informaci\u00f3n por solicitud directa en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos revelar informaci\u00f3n sensible en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticaci\u00f3n no es requerida para explotar esta vulnerabilidad.\n\nLa falla espec\u00edfica existe dentro de la interfaz de usuario basada en web. Al navegar directamente a una URL, un usuario puede obtener acceso no autorizado a datos. Un atacante puede aprovechar esta vulnerabilidad para revelar informaci\u00f3n en el contexto del dispositivo. Fue ZDI-CAN-28299."}], "id": "CVE-2026-0790", "lastModified": "2026-06-17T10:11:23.273", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0790", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-23T19:38:29.941998Z", "version": "2.0.3"}}]}, "published": "2026-01-23T04:16:06.720", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-012/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-425"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T15:19:05.911390+00:00", "value": {"mitigation_remediation": ["Upgrade the device to the latest firmware when an official patch becomes available", "Restrict access to the web UI using firewall rules, VPNs, or network segmentation so only trusted internal hosts can reach it", "Monitor incoming HTTP requests for patterns indicative of unauthorized URL probing and alert network security teams"], "summary": {"action": "Update firmware", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "Affected are ALGO\u202f8180\u202fIP Audio Alerter hardware devices, specifically models running the 5.5 firmware or earlier. The vulnerability is present in the web UI component of the product and applies to installations that expose this interface to the network.", "description_and_impact": "This vulnerability allows remote attackers to obtain sensitive device data without authentication by directly requesting a URL in the web-based user interface. Based on the description, the flaw involves an improper restriction of network access that may expose configuration details and other device state information. Because the attacker does not need to authenticate, any network\u2011accessible HTTP request can trigger the disclosure, compromising the confidentiality of the device\u2019s internal data.", "risk_and_exploitability": "The CVSS score of 7.5 indicates a high severity, but the EPSS score under 1% suggests that exploitation is unlikely in the current threat landscape. The device is not listed in the CISA KEV catalog, so there is no evidence of active exploitation. Attackers would need remote network connectivity to the device\u2019s web interface and would not require administrative credentials. The exploit path would involve sending a crafted GET request to a specific URL; a successful request results in information disclosure."}}}}, "created": "2026-01-23T10:27:04.228818+00:00", "updated": "2026-04-18T15:30:03.952248+00:00", "vendors": ["algo", "algo$PRODUCT$8180_ip_audio_alerter"]}