Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-77654

Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AlgoSec

Description

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.  This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Algosec Horizon Security Analyzer

Default version status: unaffected

  • A33.10 (up to build 300)affected
  • A33.20 (up to build 170)affected
  • A33.30 (up to build 110)affected

References