What’s Vulnerable › Vulnerabilities
CVE-2026-77654: Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer
- Severity: medium (CVSS 6.1 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-08 · updated 2026-09-08
- Weakness: CWE-266
Description
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
Affected products
- Algosec Horizon Security Analyzer: from A33.10 (up through build 300); from A33.20 (up through build 170); from A33.30 (up through build 110)
References
Get alerted when CVE-2026-77654 or the next vulnerability affects your stack