CVE-2026-77654
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Horizon Security Analyzer
- Vendor
- Algosec
- Product
- Horizon Security Analyzer
- Platforms
- Linux
- 64 bit
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| A33.10 (up to build 300) | affected | Unavailable | Unavailable | Unavailable | None listed |
| A33.20 (up to build 170) | affected | Unavailable | Unavailable | Unavailable | None listed |
| A33.30 (up to build 110) | affected | Unavailable | Unavailable | Unavailable | None listed |