Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Nova Blocks nova-blocks allows DOM-Based XSS.This issue affects Nova Blocks: from n/a through <= 2.1.9.
CVE-2026-0795 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device's web UI. It allows authenticated remote attackers to execute arbitrary system commands due to improper input validation. Exploitation requires valid user credentials but no user interaction beyond authentication. The flaw stems from unsanitized user-supplied strings used in system calls, enabling code execution with device-level privileges. Although no public exploits are currently known, successful attacks could compromise confidentiality, integrity, and availability of the device and connected systems. European organizations using this device, especially in critical communications, face risks of disruption or takeover. Mitigation involves applying vendor patches when available, restricting access to the web interface, enforcing strong authentication, and monitoring for anomalous command execution. Countries with significant deployments of ALGO devices in public safety or enterprise sectors, such as Germany, France, and the UK, are most likely affected. Given the high CVSS score (7.2) and the nature of the vulnerability, prompt remediation is essential to prevent potential exploitation.
CVE-2026-0794 is a high-severity use-after-free vulnerability in the ALGO 8180 IP Audio Alerter device that allows remote attackers to execute arbitrary code without authentication. The flaw arises from improper validation of object existence during SIP call handling, enabling exploitation through crafted SIP messages. This vulnerability impacts confidentiality, integrity, and availability of affected devices and can lead to full device compromise. No known exploits are currently in the wild, and no patches have been released yet. European organizations using ALGO 8180 devices in critical communication infrastructures are at risk. Mitigation requires network-level protections and strict SIP traffic filtering until a vendor patch is available. Countries with significant deployments of ALGO devices and critical infrastructure reliance on IP audio alerting are most likely affected. Due to the ease of remote exploitation without authentication and the potential for complete device takeover, this vulnerability is rated high severity.
CVE-2026-0793 is a high-severity heap-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in its InformaCast functionality. This flaw allows remote attackers to execute arbitrary code without requiring authentication or user interaction by sending specially crafted data that overflows a heap buffer. The vulnerability arises from improper validation of user-supplied data length before copying it into a heap buffer. Exploitation can compromise the device's confidentiality, integrity, and availability, potentially allowing full control over the device. No known exploits are currently active in the wild. European organizations using ALGO 8180 IP Audio Alerter version 5.5 are at risk, especially critical infrastructure and enterprises relying on these devices for audio alerting. Mitigation requires applying vendor patches once available and implementing network-level protections to restrict access to the device. Countries with higher adoption of ALGO products and significant critical infrastructure deployments, such as Germany, France, the UK, and the Netherlands, are most likely to be affected.
CVE-2026-0792 is a high-severity stack-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device. It arises from improper validation of the Alert-Info header in SIP INVITE requests, allowing remote attackers to execute arbitrary code without authentication or user interaction. The vulnerability affects version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. Although no known exploits are currently in the wild, successful exploitation could lead to full device takeover. European organizations using these devices in critical communication infrastructures are at risk. Mitigation requires immediate patching once available, network segmentation, and filtering of SIP traffic to prevent malicious INVITE requests. Countries with significant deployments of ALGO IP Audio Alerters and critical public safety or enterprise communication systems are most likely affected. The vulnerability’s CVSS score of 8.1 reflects its high impact and remote exploitability without authentication.
CVE-2026-0791 is a high-severity stack-based buffer overflow vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in the handling of the SIP INVITE Replaces header. This flaw allows remote attackers to execute arbitrary code without authentication by sending a specially crafted SIP INVITE request. The vulnerability arises from improper validation of user-supplied data length before copying it into a fixed-size stack buffer, leading to potential remote code execution. The CVSS score is 8.1, indicating a significant risk to confidentiality, integrity, and availability. No known exploits are currently in the wild, and no patches have been published yet. European organizations using this device in critical communication infrastructure may face risks of device takeover or disruption. Mitigation should focus on network-level protections, strict SIP traffic filtering, and close monitoring until a vendor patch is available. Countries with higher adoption of ALGO devices and strategic reliance on IP audio alerting systems are at greater risk.
CVE-2026-0790 is a medium severity vulnerability in the ALGO 8180 IP Audio Alerter device that allows unauthenticated remote attackers to disclose sensitive information via direct URL requests to the device's web UI. The flaw, categorized as CWE-425 (Direct Request or Forced Browsing), enables attackers to bypass authentication by directly accessing specific URLs, exposing data without user interaction. While no known exploits are currently active in the wild, the vulnerability affects version 5.5 of the product and poses confidentiality risks. Exploitation requires no privileges or user interaction, but does not impact integrity or availability. European organizations using ALGO 8180 devices, particularly in sectors relying on IP audio alerting, should prioritize mitigation. No official patches are currently available, so network-level controls and monitoring are essential to reduce exposure.
CVE-2026-0789 is a medium severity vulnerability affecting ALGO 8180 IP Audio Alerter devices, specifically version 5.5. It involves the exposure of sensitive authentication cookie information within the web UI response body, allowing remote attackers to access sensitive data without authentication or user interaction. The flaw stems from improper handling of sensitive information in the device's web interface. While it does not allow direct control or disruption of the device, the disclosed information could facilitate further attacks. No known exploits are currently reported in the wild. European organizations using these devices should be aware of this information disclosure risk and apply mitigations promptly.
CVE-2026-0788 is a persistent cross-site scripting (XSS) vulnerability in the ALGO 8180 IP Audio Alerter's web interface, specifically in the syslog viewing functionality. This flaw allows unauthenticated remote attackers to inject arbitrary scripts, which execute with the privileges of the targeted user. Exploitation does not require authentication or user interaction, increasing its risk. The vulnerability stems from improper input validation, enabling attackers to manipulate the web UI and potentially perform unauthorized actions. Although the CVSS score is medium (5.3), the lack of authentication requirement raises concerns about ease of exploitation. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices should prioritize patching or mitigating this issue to prevent potential compromise of administrative sessions or further attacks leveraging the injected scripts.
CVE-2026-0787 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in the SAC module. It allows remote attackers to execute arbitrary code without authentication by exploiting improper input validation before system calls. The vulnerability affects version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. No known exploits are currently in the wild. European organizations using this device in critical communication infrastructure could face significant operational disruption and data compromise. Mitigation requires immediate patching once available, network segmentation, and strict input validation controls. Countries with higher adoption of ALGO devices in public safety or enterprise communications are at greater risk. Given the ease of exploitation and impact, this vulnerability is rated high severity with a CVSS score of 8.1.
CVE-2026-0786 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically within its SCI module. The flaw arises from improper validation of user-supplied input used in system calls, allowing authenticated remote attackers to execute arbitrary code on the device. Exploitation requires low privileges and no user interaction but does require authentication. The vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently in the wild. European organizations using ALGO 8180 devices, especially in critical communication infrastructures, face risks of device takeover and disruption. Mitigation involves applying vendor patches when available, restricting access to the device management interface, and implementing strict input validation and network segmentation. Countries with significant deployments of ALGO products and critical infrastructure reliance on IP audio alerting systems, such as Germany, France, and the UK, are most likely affected.
CVE-2026-0785 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in its API interface. The flaw allows authenticated remote attackers to execute arbitrary system commands due to improper validation of user-supplied input. Exploitation requires low privileges and no user interaction but has a high impact on confidentiality, integrity, and availability. No known active exploits have been reported yet. The vulnerability affects version 5.5 of the product. European organizations using this device in critical communication infrastructures are at risk. Mitigation involves applying vendor patches when available, restricting API access, and implementing network segmentation and monitoring. Countries with significant deployments of ALGO devices and critical infrastructure reliance on IP audio alerting are most likely affected.
CVE-2026-0784 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web-based user interface. It allows authenticated remote attackers to execute arbitrary code on affected devices by exploiting improper validation of user-supplied input used in system calls. The vulnerability requires authentication but no user interaction beyond that. It impacts version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. No known exploits are currently in the wild. European organizations using this device in critical communication infrastructure could face significant operational disruption and data compromise. Mitigation involves applying patches when available, restricting access to the management interface, and implementing strict input validation and network segmentation. Countries with higher adoption of ALGO devices and critical infrastructure reliance on IP audio alerting are most at risk, including Germany, France, the UK, and the Netherlands. The CVSS score is 7.
CVE-2026-0783 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web UI, allowing authenticated remote attackers to execute arbitrary code. The flaw arises from improper validation of user-supplied input used in system calls, enabling code execution with device-level privileges. Exploitation requires authentication but no user interaction beyond that. This vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices, especially in critical infrastructure or public safety sectors, face risks of device takeover and disruption. Mitigation involves applying vendor patches when available, restricting administrative access, and monitoring device logs for suspicious activity. Countries with higher deployments of ALGO products and strategic use in public alerting systems, such as Germany, France, and the UK, are most likely affected.
CVE-2026-0782 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web interface. It allows authenticated remote attackers to execute arbitrary code on affected devices due to improper validation of user-supplied input used in system calls. Exploitation requires authentication but no user interaction beyond that. The vulnerability impacts confidentiality, integrity, and availability of the device, potentially enabling full control by attackers. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices, especially in critical infrastructure or public safety sectors, face significant risks. Mitigation involves applying vendor patches once available, restricting access to the device’s web interface, and implementing strict input validation and network segmentation. Countries with higher adoption of ALGO products and strategic use in public safety communications are most at risk. The CVSS score of 7.2 reflects a high severity due to network exploitability and full system compromise potential.
CVE-2026-0781 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web interface. It allows authenticated remote attackers to execute arbitrary code on affected devices due to improper input validation before system calls. Exploitation requires valid authentication but no user interaction beyond that. The vulnerability impacts version 5.5 of the product and can compromise confidentiality, integrity, and availability of the device. No public exploits are known yet. European organizations using this device in critical communication or alerting roles face risks of operational disruption and data compromise. Mitigation involves applying vendor patches once available, restricting device access, and monitoring for anomalous activity. Countries with higher adoption of ALGO products and critical infrastructure deployments are more likely to be affected.
CVE-2026-0780 is a high-severity OS command injection vulnerability in the web UI of ALGO 8180 IP Audio Alerter devices, allowing authenticated remote attackers to execute arbitrary code. The flaw stems from improper validation of user input used in system calls, enabling code execution with device-level privileges. Exploitation requires authentication but no user interaction beyond that. The vulnerability impacts version 5.5 of the product and has a CVSS score of 7.2, indicating significant confidentiality, integrity, and availability risks. No public exploits are currently known. European organizations using ALGO 8180 devices, especially in critical infrastructure or public safety communications, face potential operational disruption and data compromise. Mitigation involves applying vendor patches once available, restricting administrative access, and monitoring device logs for suspicious activity. Countries with higher adoption of ALGO IP Audio Alerter systems and critical public safety deployments, such as Germany, France, and the UK, are most likely affected.
CVE-2026-0779 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter device, specifically in its web-based user interface. The flaw arises from improper validation of user-supplied input used in system calls, allowing authenticated remote attackers to execute arbitrary code on the device. Exploitation requires authentication but no user interaction beyond that. The vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently reported in the wild. European organizations using ALGO 8180 devices, especially in critical infrastructure or public safety communications, face significant risks. Mitigation involves applying vendor patches when available, restricting administrative access, and monitoring device logs for suspicious activity.
CVE-2026-0796 is a high-severity OS command injection vulnerability in the ALGO 8180 IP Audio Alerter's web UI. It allows authenticated remote attackers to execute arbitrary code on the device due to improper validation of user input before system calls. Exploitation requires valid credentials but no user interaction beyond authentication. The vulnerability impacts confidentiality, integrity, and availability of affected devices. No known exploits are currently reported in the wild. This flaw could be leveraged to disrupt audio alerting systems or pivot into internal networks. European organizations using ALGO 8180 devices should prioritize patching or mitigating this issue. Countries with critical infrastructure or large deployments of ALGO products are at higher risk. Immediate mitigation includes restricting access to the device UI, enforcing strong authentication, and monitoring for suspicious activity. The CVSS score is 7.
Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through <= 1.8.16.
