CVE-2026-77654 (GCVE-0-2026-77654)
Vulnerability from cvelistv5
Published
2026-09-08 10:44
Modified
2026-09-08 12:19
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-266 - Incorrect privilege assignment
Summary
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.
A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.
This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Algosec | Horizon Security Analyzer |
Version: A33.10 (up to build 300) Version: A33.20 (up to build 170) Version: A33.30 (up to build 110) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-77654",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-08T12:19:17.974612Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-08T12:19:26.694Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux",
"64 bit"
],
"product": "Horizon Security Analyzer",
"vendor": "Algosec",
"versions": [
{
"status": "affected",
"version": "A33.10 (up to build 300)"
},
{
"status": "affected",
"version": "A33.20 (up to build 170)"
},
{
"status": "affected",
"version": "A33.30 (up to build 110)"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Luis V\u00e1zquez Casta\u00f1o - https://www.linkedin.com/in/lvazcas/"
},
{
"lang": "en",
"type": "finder",
"value": "Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/"
},
{
"lang": "en",
"type": "finder",
"value": "Siemens Healthineers Red Team"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u0026nbsp;Privilege Escalation and Parameter Injection.\u003cbr\u003e\u003cbr\u003eA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u0026nbsp;\u003cbr\u003e\u003cp\u003eThis issue affects\u0026nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-233 Privilege Escalation"
}
]
},
{
"capecId": "CAPEC-137",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-137 Parameter Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "USER",
"Safety": "NEGLIGIBLE",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "LOW"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "CWE-266 Incorrect privilege assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-08T10:44:32.657Z",
"orgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738",
"shortName": "AlgoSec"
},
"references": [
{
"url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u0026nbsp;(build 310 and above), A33.20 (build 180 and above) and\u0026nbsp;\nA33.30 (build 120 and above).\u003cbr\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://portal.algosec.com/en/downloads/hotfix_releases\"\u003ehttps://portal.algosec.com/en/downloads/hotfix_releases\u003c/a\u003e"
}
],
"value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u00a0(build 310 and above), A33.20 (build 180 and above) and\u00a0\nA33.30 (build 120 and above).\n https://portal.algosec.com/en/downloads/hotfix_releases"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738",
"assignerShortName": "AlgoSec",
"cveId": "CVE-2026-77654",
"datePublished": "2026-09-08T10:44:32.657Z",
"dateReserved": "2026-08-21T04:33:36.370Z",
"dateUpdated": "2026-09-08T12:19:26.694Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-77654\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T12:19:17.974612Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T12:19:23.133Z\"}}], \"cna\": {\"title\": \"Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Luis V\\u00e1zquez Casta\\u00f1o - https://www.linkedin.com/in/lvazcas/\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Siemens Healthineers Red Team\"}], \"impacts\": [{\"capecId\": \"CAPEC-233\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-233 Privilege Escalation\"}]}, {\"capecId\": \"CAPEC-137\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-137 Parameter Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NEGLIGIBLE\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 6.1, \"Automatable\": \"YES\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"ACTIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Algosec\", \"product\": \"Horizon Security Analyzer\", \"versions\": [{\"status\": \"affected\", \"version\": \"A33.10 (up to build 300)\"}, {\"status\": \"affected\", \"version\": \"A33.20 (up to build 170)\"}, {\"status\": \"affected\", \"version\": \"A33.30 (up to build 110)\"}], \"platforms\": [\"Linux\", \"64 bit\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\\u00a0(build 310 and above), A33.20 (build 180 and above) and\\u00a0\\nA33.30 (build 120 and above).\\n https://portal.algosec.com/en/downloads/hotfix_releases\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u0026nbsp;(build 310 and above), A33.20 (build 180 and above) and\u0026nbsp;\\nA33.30 (build 120 and above).\u003cbr\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://portal.algosec.com/en/downloads/hotfix_releases\\\"\u003ehttps://portal.algosec.com/en/downloads/hotfix_releases\u003c/a\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\\u00a0Privilege Escalation and Parameter Injection.\\n\\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\\u00a0\\n\\n\\nThis issue affects\\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u0026nbsp;Privilege Escalation and Parameter Injection.\u003cbr\u003e\u003cbr\u003eA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u0026nbsp;\u003cbr\u003e\u003cp\u003eThis issue affects\u0026nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-266\", \"description\": \"CWE-266 Incorrect privilege assignment\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*\", \"vulnerable\": true}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"ca5f073f-8266-4d43-b3e3-6eb0bb18a738\", \"shortName\": \"AlgoSec\", \"dateUpdated\": \"2026-09-08T10:44:32.657Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-77654\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-08T12:19:26.694Z\", \"dateReserved\": \"2026-08-21T04:33:36.370Z\", \"assignerOrgId\": \"ca5f073f-8266-4d43-b3e3-6eb0bb18a738\", \"datePublished\": \"2026-09-08T10:44:32.657Z\", \"assignerShortName\": \"AlgoSec\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…