Priority HIGH 72
Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows authenticated attackers to execute arbitrary commands.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.02404 · Published 2026-01-13 · No fix listed CWE-78
Priority MEDIUM 46
ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01388 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 44
ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00709 · Published 2026-01-23 · No fix listed CWE-416
Priority MEDIUM 44
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00709 · Published 2026-01-23 · No fix listed CWE-122
Priority MEDIUM 44
ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00709 · Published 2026-01-23 · No fix listed CWE-121
Priority MEDIUM 44
ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00877 · Published 2026-01-23 · No fix listed CWE-121
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01642 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01459 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01289 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01394 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01642 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01642 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01642 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01661 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01661 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01661 · Published 2026-01-23 · No fix listed CWE-78
Priority MEDIUM 43
Algo Communication Products Ltd.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02825 · Published 2022-06-22 · No fix listed CWE-22
Priority MEDIUM 40
ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00731 · Published 2026-01-23 · No fix listed CWE-425
Priority MEDIUM 40
ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00696 · Published 2026-01-23 · No fix listed CWE-200
Priority LOW 28
ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00422 · Published 2026-01-23 · No fix listed CWE-79