CVE-2026-0793: ALGO 8180 IP Audio Alerter InformaCast Heap Buffer Overflow with Remote Code Execution
The InformaCast functionality of the ALGO 8180 IP Audio Alerter contains a heap-based buffer overflow caused by missing length validation of user-supplied data. According to the record, a remote attacker without authentication may execute code on affected devices, and NVD assigns a base score of 9.8. The consulted record lists no fixed version, and the CVE is not listed in CISA KEV.
Overview
CVE-2026-0793 is a heap-based buffer overflow in the InformaCast functionality of the ALGO 8180 IP Audio Alerter. The flaw stems from copying user-supplied data into a heap buffer without checking its length first. The Zero Day Initiative (ZDI) published the finding, and the record classifies it under CWE-787 (Out-of-bounds Write).
Impact
- The record states that a remote attacker can execute arbitrary code in the context of the device.
- No authentication is required, according to the description.
- NVD scores the issue at 9.8 (critical), with high impact on confidentiality, integrity and availability.
- SSVC data in the record shows exploitation as "none", automatable as "no" and technical impact as "total".
Affected products and versions
- ALGO 8180 IP Audio Alerter, version 5.5.
- Algosolutions 8180 IP Audio Alerter Firmware, version 5.5.
- The record lists only version 5.5. Whether other versions or hardware revisions are affected is unknown from the available data.
Exploitation status
- The CVE is not listed in CISA KEV in the record.
- No confirmed exploitation appears in the sources consulted for this analysis.
- The EPSS probability is 0.00709, which is a statistical estimate and not evidence of attacks.
Remediation and mitigation
- The record contains no fixed version or vendor patch reference. Check the ZDI advisory and the manufacturer for updates before making changes.
- Until a fix is confirmed, reduce exposure: restrict network access to the device and its InformaCast interfaces, keep it off untrusted networks, and segment it from general user traffic.
- Inventory all ALGO 8180 devices and firmware, including the firmware product, to know which units run version 5.5.
Detection guidance
- Monitor for unexpected restarts, crashes or unusual behavior of the device, which may indicate memory corruption attempts.
- Review network logs for unexpected inbound traffic to the device's InformaCast-related services from untrusted sources.
- Track configuration and firmware integrity on the device and alert on unauthorized changes.
Limitations of the available information
- The record does not include technical details beyond the general description, and no proof-of-concept or vendor advisory was consulted.
- No fixed version is listed, so the status of a remedy is unknown.
- The EPSS date in the record (2026-10-23) is later than the publication date, which may indicate a data quality issue; the EPSS values should be treated with caution.
- Affected scope beyond version 5.5 is unknown.
Sources: ZDI advisory ZDI-26-015, NVD entry, CVE Record.
Frequently asked questions
What is CVE-2026-0793?
It is a heap-based buffer overflow in the InformaCast functionality of the ALGO 8180 IP Audio Alerter that can allow remote code execution without authentication, according to the record.
Which versions are affected?
The record lists version 5.5 for both the ALGO 8180 IP Audio Alerter and its firmware product. Other versions are not stated in the available data.
Is this vulnerability being exploited?
CISA KEV does not list this CVE in the record, and no confirmed exploitation appears in the sources consulted.
Is there a fix?
The record lists no fixed version. Check the ZDI advisory and the manufacturer for updates and apply mitigations such as network restriction until a fix is confirmed.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.