CVE-2026-77654CWE-266

CVE-2026-77654

published September 8, 2026

CVSS
6.1
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.

A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.

This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

The record
Technical detail
CVSS
6.1 · NONE
CVSS v4.0
6.1 · CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-09-08T15:17Z
References (1)
https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm · [email protected]
EPSS history
Timeline
  • 10 SEP 03:18Z
    EPSS moved — → 0%
    epss
  • 08 SEP 10:44Z
    Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer
    cvelistv5