What is CVE-2026-0790?

CVE-2026-0790 is a high-severity vulnerability in Algo 8180 Ip Audio Alerter, classified under Direct Request (Forced Browsing). CVSS score: 7.5/10. Published 2026-01-23.

How severe is CVE-2026-0790?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Algo 8180 Ip Audio Alerter

CVE-2026-0790

ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299.

EPSS: 0.007 (47.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Algo 8180 Ip Audio Alerter — versions 5.5
Algosolutions 8180_ip_audio_alerter
Algosolutions 8180_ip_audio_alerter_firmware — versions 5.5

Weakness classification (CWE)

CWE-425 — Direct Request (Forced Browsing)

References

zdi-disclosures@trendmicro.com (x_research-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2026-0790?: CVE-2026-0790 is a high-severity vulnerability in Algo 8180 Ip Audio Alerter, classified under Direct Request (Forced Browsing). CVSS score: 7.5/10. Published 2026-01-23.
How severe is CVE-2026-0790?: High severity. CVSS v3 base score is 7.5 out of 10.