CNNVD-202601-4152 Information

CNNVD ID

CNNVD-202601-4152

CVE-2026-0796

  • CNNVD Published: 2026-01-23

Description (Chinese)

ALGO 8180 IP Audio Alerter是ALGO公司的一款IP扬声器。 ALGO 8180 IP Audio Alerter存在操作系统命令注入漏洞,该漏洞源于基于Web的用户界面缺少对用户输入字符串的验证,可能导致远程代码执行。

Description (English)

ALGO 8180 IP Audio Alerter is an IP speaker for ALGO. ALGO 8180 IP Audio Alerter has an operational system command plug-in, which results from a Web-based user interface that lacks authentication of user input strings, which may lead to remote code execution.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

Algo

Published

2026-01-23

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-26-018/

Share on: