CVE Intelligence
Analysis AI-assisted

CVE-2026-0792: ALGO 8180 IP Audio Alerter Stack-based Buffer Overflow via SIP INVITE Alert-Info Header

CVE-2026-0792 is a stack-based buffer overflow in the ALGO 8180 IP Audio Alerter, triggered by an oversized Alert-Info header in SIP INVITE requests. According to the record, it can be exploited remotely without authentication and may allow code execution in the device context. No fix is listed in the consulted sources, and the record shows no KEV listing.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-0792 is described in the record as a stack-based buffer overflow in the ALGO 8180 IP Audio Alerter. The flaw lies in handling the Alert-Info header of SIP INVITE requests, where the length of user-supplied data is not validated before it is copied into a fixed-length stack buffer. The record classifies the weakness as CWE-787 (Out-of-bounds Write). The advisory reference is the ZDI advisory.

Impact

  • The record states that a remote attacker may execute arbitrary code in the context of the device.
  • The record states that authentication is not required.
  • NVD scores the issue at 9.8 (critical). The SSVC technical impact is listed as total.

Affected products and versions

  • The record lists ALGO 8180 IP Audio Alerter and Algosolutions 8180 Ip Audio Alerter Firmware, both associated with 5.5.
  • The record does not describe versions before or after 5.5, so the full affected range is unknown.

Exploitation status

  • The record shows the CISA KEV listing as false.
  • No confirmed exploitation appears in the sources consulted.
  • The EPSS probability is 0.00709 with a percentile of 0.52969.
  • SSVC lists exploitation as none and automatable as no.

Remediation and mitigation

  • The record lists no fixed version. This does not prove that no fix exists; check the vendor and the ZDI advisory.
  • Restrict SIP signaling exposure to trusted networks and block untrusted SIP traffic at the network perimeter.
  • Place these devices in segmented networks, limiting reach to voice and management systems.
  • Inventory devices identified as 5.5 and prioritize them given the critical score.

Detection guidance

  • Monitor SIP signaling at network boundaries for unusually large or malformed header values.
  • Watch for unexpected device reboots, crashes, or outbound connections from audio alerting equipment.
  • Correlate alerts from SIP traffic with device logs to spot anomalies.

Limitations of the available information

  • The record contains no fixed version, vendor patch status, or advisory text beyond the summary.
  • The full set of affected versions beyond 5.5 is unknown.
  • The record does not include a confirmed exploitation timeline.

Frequently asked questions

What is CVE-2026-0792?

It is a stack-based buffer overflow in the ALGO 8180 IP Audio Alerter, triggered through the Alert-Info header of SIP INVITE requests, according to the record.

Is authentication needed to exploit it?

The record states that authentication is not required.

Is there a fixed version?

The record lists no fixed version. Check the vendor and the ZDI advisory for remediation status.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.