CVE-2026-0785

CVE-2026-0785 is a critical API command injection vulnerability affecting Algo 8180 IP Audio Alerter devices, allowing authenticated remote attackers to execute arbitrary code. The flaw stems from insufficient input validation, enabling an attacker to inject malicious commands into system calls. With a CVSS score of 8.8 (High), exploitation requires authentication but can lead to full compromise of the device. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not widely known or exploited in the wild.