Read the docs

ALGO

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

ALGO records in CISA KEV

No ALGO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

20 records

Priority HIGH 72

Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows authenticated attackers to execute arbitrary commands.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02404 Published 2026-01-13 No fix listed CWE-78
Priority MEDIUM 46

ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01388 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 44

ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00709 Published 2026-01-23 No fix listed CWE-416
Priority MEDIUM 44

ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00709 Published 2026-01-23 No fix listed CWE-122
Priority MEDIUM 44

ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00709 Published 2026-01-23 No fix listed CWE-121
Priority MEDIUM 44

ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00877 Published 2026-01-23 No fix listed CWE-121
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01642 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01459 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01394 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01642 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01642 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01642 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-01-23 No fix listed CWE-78
Priority MEDIUM 43

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-01-23 No fix listed CWE-78
TI-2022-13370 CVE-2022-31395 · GHSA-jvpm-vq39-pfjh

Algo Communication Products Ltd.

Priority MEDIUM 43

Algo Communication Products Ltd.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02825 Published 2022-06-22 No fix listed CWE-22
Priority MEDIUM 40

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00696 Published 2026-01-23 No fix listed CWE-200
Priority LOW 28

ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00422 Published 2026-01-23 No fix listed CWE-79
Open these records in search →