CVE Intelligence
Analysis AI-assisted

CVE-2026-0794: ALGO 8180 IP Audio Alerter SIP Use-After-Free Vulnerability

CVE-2026-0794 is a use-after-free flaw in the SIP call handling of the ALGO 8180 IP Audio Alerter, reported by the Zero Day Initiative. According to the record, it can be exploited remotely without authentication to execute code on the device. NVD rates it critical with a base score of 9.8, and no fixed version is listed in the sources consulted.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-0794 affects the SIP call handling of the ALGO 8180 IP Audio Alerter. According to the Zero Day Initiative advisory, the flaw is a use-after-free condition: an operation is performed on an object without first confirming that the object still exists.

Impact

  • The record states that a remote attacker could execute arbitrary code in the context of the device.
  • Authentication is described as not required.
  • NVD assigns a base score of 9.8 (critical). Its vector indicates network attack vector, low complexity, no privileges and no user interaction, with high impact to confidentiality, integrity and availability.
  • The ZDI disclosure provider lists a lower score of 8.1.

Affected products and versions

  • ALGO 8180 IP Audio Alerter, version 5.5.
  • Algosolutions 8180 Ip Audio Alerter Firmware, version 5.5.

The record does not describe any other affected range. Whether earlier or later releases are affected is unknown from the sources consulted.

Exploitation status

The CVE is not listed in the CISA Known Exploited Vulnerabilities catalog in this record, so no active exploitation is confirmed by that source. No confirmed exploitation in the wild appears in the sources consulted. SSVC data in the record marks exploitation as none and automatable as no. The EPSS probability is 0.00709.

Remediation and mitigation

  • Identify whether any deployed ALGO 8180 device runs version 5.5 or firmware containing the affected component.
  • Contact the vendor for an updated firmware release. The record does not list any fixed version, so the availability of a fix is unknown.
  • Restrict network reachability of SIP signaling to trusted networks and known peers, and place these devices behind segmentation or filtering controls.
  • Track the ZDI advisory and the NVD entry for updates to the affected version information.

Detection guidance

  • Review logs and network telemetry for unexpected SIP traffic from untrusted sources reaching the device.
  • Watch for unexplained device crashes, restarts or abnormal behavior in SIP call handling.
  • Maintain an inventory of these devices so that exposure can be assessed quickly.

Limitations of the available information

  • No fixed version or vendor patch is listed in the record.
  • Only the ZDI advisory and NVD and CVE.org records were available; no vendor advisory was included.
  • The range of affected versions is limited to version 5.5 as listed.
  • Technical details beyond the public description are not provided here, and no exploitation details are included.

Frequently asked questions

Is CVE-2026-0794 being actively exploited?

The record does not list the CVE in CISA KEV, and no confirmed exploitation in the wild appears in the sources consulted. SSVC data in the record marks exploitation as none.

Which versions are affected?

The record lists version 5.5 for the ALGO 8180 IP Audio Alerter and its firmware. It does not describe any other range.

Is there a fixed version?

No fixed version is listed in the record. Check the vendor for updates, since the availability of a fix is unknown from the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.