CVE-2026-0790

The record

ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299.

Affected packages

Related vulnerabilities

• CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
• CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
• CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
• CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
• CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
• CVE-2026-9610 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-425
• CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
• CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425