Vulnerability-Lookup

CVE-2026-77654 (GCVE-0-2026-77654)

Vulnerability from cvelistv5 – Published: 2026-09-08 10:44 – Updated: 2026-09-08 12:19

Title

Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer

Summary

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Severity

6.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-08 12:19 UTC

CWE

CWE-266 - Incorrect privilege assignment

Assigner

AlgoSec mitre root

References

1 reference

URL	Tags
https://techdocs.algosec.com/en/cves/Content/tech…

Impacted products

1 product

Vendor	Product	Version	CPE status
Algosec	Horizon Security Analyzer	Affected: A33.10 (up to build 300) Affected: A33.20 (up to build 170) Affected: A33.30 (up to build 110) cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_::linux::::: cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_::64_bit::::: cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_::linux::::: cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_::64_bit::::: cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_::linux::::: cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_::64_bit:::::

Credits

Luis Vázquez Castaño - https://www.linkedin.com/in/lvazcas/ Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/ Siemens Healthineers Red Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77654",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-08T12:19:17.974612Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T12:19:26.694Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "64 bit"
          ],
          "product": "Horizon Security Analyzer",
          "vendor": "Algosec",
          "versions": [
            {
              "status": "affected",
              "version": "A33.10 (up to build 300)"
            },
            {
              "status": "affected",
              "version": "A33.20 (up to build 170)"
            },
            {
              "status": "affected",
              "version": "A33.30 (up to build 110)"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Luis V\u00e1zquez Casta\u00f1o - https://www.linkedin.com/in/lvazcas/"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Siemens Healthineers Red Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u0026nbsp;Privilege Escalation and Parameter Injection.\u003cbr\u003e\u003cbr\u003eA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u0026nbsp;\u003cbr\u003e\u003cp\u003eThis issue affects\u0026nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        },
        {
          "capecId": "CAPEC-137",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-137 Parameter Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266 Incorrect privilege assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T10:44:32.657Z",
        "orgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738",
        "shortName": "AlgoSec"
      },
      "references": [
        {
          "url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u0026nbsp;(build 310 and above), A33.20 (build 180 and above) and\u0026nbsp;\nA33.30 (build 120 and above).\u003cbr\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://portal.algosec.com/en/downloads/hotfix_releases\"\u003ehttps://portal.algosec.com/en/downloads/hotfix_releases\u003c/a\u003e"
            }
          ],
          "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u00a0(build 310 and above), A33.20 (build 180 and above) and\u00a0\nA33.30 (build 120 and above).\n https://portal.algosec.com/en/downloads/hotfix_releases"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738",
    "assignerShortName": "AlgoSec",
    "cveId": "CVE-2026-77654",
    "datePublished": "2026-09-08T10:44:32.657Z",
    "dateReserved": "2026-08-21T04:33:36.370Z",
    "dateUpdated": "2026-09-08T12:19:26.694Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-77654",
      "date": "2026-09-10",
      "epss": "0.00099",
      "percentile": "0.00868"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-77654\",\"sourceIdentifier\":\"security.vulnerabilities@algosec.com\",\"published\":\"2026-09-08T11:17:44.283\",\"lastModified\":\"2026-09-08T14:03:48.663\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\\n\\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\\n\\n\\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.\"}],\"affected\":[{\"source\":\"security.vulnerabilities@algosec.com\",\"affectedData\":[{\"vendor\":\"Algosec\",\"product\":\"Horizon Security Analyzer\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Linux\",\"64 bit\"],\"versions\":[{\"version\":\"A33.10 (up to build 300)\",\"status\":\"affected\"},{\"version\":\"A33.20 (up to build 170)\",\"status\":\"affected\"},{\"version\":\"A33.30 (up to build 110)\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security.vulnerabilities@algosec.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"ACTIVE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NEGLIGIBLE\",\"Automatable\":\"YES\",\"Recovery\":\"USER\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"LOW\",\"providerUrgency\":\"AMBER\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-08T12:19:17.974612Z\",\"id\":\"CVE-2026-77654\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security.vulnerabilities@algosec.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-266\"}]}],\"references\":[{\"url\":\"https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm\",\"source\":\"security.vulnerabilities@algosec.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-77654\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T12:19:17.974612Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T12:19:23.133Z\"}}], \"cna\": {\"title\": \"Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Luis V\\u00e1zquez Casta\\u00f1o - https://www.linkedin.com/in/lvazcas/\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Siemens Healthineers Red Team\"}], \"impacts\": [{\"capecId\": \"CAPEC-233\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-233 Privilege Escalation\"}]}, {\"capecId\": \"CAPEC-137\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-137 Parameter Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NEGLIGIBLE\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 6.1, \"Automatable\": \"YES\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"ACTIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Algosec\", \"product\": \"Horizon Security Analyzer\", \"versions\": [{\"status\": \"affected\", \"version\": \"A33.10 (up to build 300)\"}, {\"status\": \"affected\", \"version\": \"A33.20 (up to build 170)\"}, {\"status\": \"affected\", \"version\": \"A33.30 (up to build 110)\"}], \"platforms\": [\"Linux\", \"64 bit\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\\u00a0(build 310 and above), A33.20 (build 180 and above) and\\u00a0\\nA33.30 (build 120 and above).\\n https://portal.algosec.com/en/downloads/hotfix_releases\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u0026nbsp;(build 310 and above), A33.20 (build 180 and above) and\u0026nbsp;\\nA33.30 (build 120 and above).\u003cbr\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://portal.algosec.com/en/downloads/hotfix_releases\\\"\u003ehttps://portal.algosec.com/en/downloads/hotfix_releases\u003c/a\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\\u00a0Privilege Escalation and Parameter Injection.\\n\\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\\u00a0\\n\\n\\nThis issue affects\\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u0026nbsp;Privilege Escalation and Parameter Injection.\u003cbr\u003e\u003cbr\u003eA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u0026nbsp;\u003cbr\u003e\u003cp\u003eThis issue affects\u0026nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-266\", \"description\": \"CWE-266 Incorrect privilege assignment\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"ca5f073f-8266-4d43-b3e3-6eb0bb18a738\", \"shortName\": \"AlgoSec\", \"dateUpdated\": \"2026-09-08T10:44:32.657Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-77654\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-08T12:19:26.694Z\", \"dateReserved\": \"2026-08-21T04:33:36.370Z\", \"assignerOrgId\": \"ca5f073f-8266-4d43-b3e3-6eb0bb18a738\", \"datePublished\": \"2026-09-08T10:44:32.657Z\", \"assignerShortName\": \"AlgoSec\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-77654

Vulnerability from fkie_nvd - Published: 2026-09-08 11:17 - Updated: 2026-09-08 14:03

Severity

6.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber

Summary

References

	URL	Tags
	security.vulnerabilities@algosec.com	https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "64 bit"
          ],
          "product": "Horizon Security Analyzer",
          "vendor": "Algosec",
          "versions": [
            {
              "status": "affected",
              "version": "A33.10 (up to build 300)"
            },
            {
              "status": "affected",
              "version": "A33.20 (up to build 170)"
            },
            {
              "status": "affected",
              "version": "A33.30 (up to build 110)"
            }
          ]
        }
      ],
      "source": "security.vulnerabilities@algosec.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30."
    }
  ],
  "id": "CVE-2026-77654",
  "lastModified": "2026-09-08T14:03:48.663",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "YES",
          "Recovery": "USER",
          "Safety": "NEGLIGIBLE",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "AMBER",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "ACTIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "LOW"
        },
        "source": "security.vulnerabilities@algosec.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-77654",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-08T12:19:17.974612Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-08T11:17:44.283",
  "references": [
    {
      "source": "security.vulnerabilities@algosec.com",
      "url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"
    }
  ],
  "sourceIdentifier": "security.vulnerabilities@algosec.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        }
      ],
      "source": "security.vulnerabilities@algosec.com",
      "type": "Secondary"
    }
  ]
}

GHSA-3PWX-5G7F-2MVM

Vulnerability from github – Published: 2026-09-08 12:31 – Updated: 2026-09-08 12:31

Details

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.

A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.

This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Severity

6.1 (Medium)


                  
                    CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-77654"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-266"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-08T11:17:44Z",
    "severity": "MODERATE"
  },
  "details": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.",
  "id": "GHSA-3pwx-5g7f-2mvm",
  "modified": "2026-09-08T12:31:29Z",
  "published": "2026-09-08T12:31:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77654"
    },
    {
      "type": "WEB",
      "url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-77654 (GCVE-0-2026-77654)

FKIE_CVE-2026-77654

GHSA-3PWX-5G7F-2MVM

Tags

Sightings

Nomenclature