CVE-2026-0786

CVE-2026-0786 is a critical command injection vulnerability affecting ALGO 8180 IP Audio Alerter devices and their firmware, allowing authenticated remote attackers to execute arbitrary code. With a CVSS score of 8.8 (High), this flaw stems from insufficient input validation in the SCI module, enabling attackers to run commands in the device's context. While authentication is required, the attack complexity is low, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat despite its high severity.