Approved changes feed: RSS · Atom

cpe:2.3:a:algo_solutions:algo_8028:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlgo Solutions (20a76873-563b-548b-a5f5-a9e21ddecbb6)
ProductAlgo 8028 (b6f8b078-cac9-5c22-9516-78234cc9753b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50909 vulnerable 2026-06-08 05:52:03.690634 Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)
HIGH (8.8)
Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows authenticated attackers to execute arbitrary commands. Attackers can exploit the insecure 'source' parameter by injecting commands that are executed with root privileges, enabling remote code execution through a crafted POST request.
Published: 2026-01-13T22:51:50.115Z
Updated: 2026-01-14T16:28:12.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.