Lucene search
K

8005 matches found

Vulnrichment
Vulnrichment
added 2026/01/23 2:58 a.m.4 views

CVE-2026-0784 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.5AI score0.0148EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:58 a.m.3 views

CVE-2026-0783

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.3AI score0.0148EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:58 a.m.4 views

CVE-2026-0782 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.5AI score0.0148EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:58 a.m.31 views

CVE-2026-0782 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS0.0148EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:58 a.m.9 views

CVE-2026-0781

The CVE-2026-0781 entry concerns ALGO 8180 IP Audio Alerter devices. Affected component: the web-based user interface, where improper validation of a user-supplied string before it is used to construct/execute a system call enables remote code execution in the device context. Exploitation require...

8.8CVSS6.5AI score0.01497EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:58 a.m.3 views

CVE-2026-0781

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.3AI score0.01497EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/23 2:58 a.m.27 views

CVE-2026-0781 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS0.01497EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:57 a.m.10 views

CVE-2026-0780

CVE-2026-0780 concerns the ALGO 8180 IP Audio Alerter, where the web UI fails to validate a user-supplied string before it is used in a system call, enabling a remote attacker to execute arbitrary code in the device’s context. The vulnerability is described as a Web UI command injection that requ...

8.8CVSS6.5AI score0.01497EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/23 2:57 a.m.31 views

CVE-2026-0780 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS0.01497EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:55 a.m.9 views

CVE-2026-0796

CVE-2026-0796 concerns the ALGO 8180 IP Audio Alerter. The vulnerability stems from insufficient validation of a user-supplied string in the device’s web UI before it is used to execute a system call, enabling remote attackers to execute arbitrary code. Affects ALGO 8180 IP Audio Alerter devices;...

8.8CVSS6.5AI score0.01511EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:55 a.m.3 views

CVE-2026-0796 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.5AI score0.01511EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:55 a.m.2 views

CVE-2026-0796

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.3AI score0.01511EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/23 2:55 a.m.33 views

CVE-2026-0796 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS0.01511EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/22 11:24 p.m.4 views

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

5.3CVSS5.8AI score0.00303EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/22 9:7 a.m.2 views

EUVD-2026-4194

Malicious code in @alluxio/common-ui npm...

5.5AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 8:10 a.m.2 views

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

4.3CVSS5.3AI score0.0026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.3 views

PT-2026-3920

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

4.3CVSS5.5AI score0.0026EPSS
Exploits0References2
NVD
NVD
added 2026/01/21 11:15 p.m.3 views

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

5.3CVSS0.00303EPSS
Exploits0References4
OSV
OSV
added 2026/01/21 10:25 p.m.3 views

CVE-2026-23990 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

5.3CVSS5.9AI score0.00303EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/01/21 10:25 p.m.16 views

CVE-2026-23990 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

5.3CVSS0.00303EPSS
Exploits0References4
Rows per page
Query Builder