CVE-2026-77654

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-77654", "assignerOrgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738", "state": "PUBLISHED", "assignerShortName": "AlgoSec", "dateReserved": "2026-08-21T04:33:36.370Z", "datePublished": "2026-09-08T10:44:32.657Z", "dateUpdated": "2026-09-08T12:19:26.694Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738", "shortName": "AlgoSec", "dateUpdated": "2026-09-08T10:44:32.657Z"}, "title": "Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-266", "description": "CWE-266 Incorrect privilege assignment", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}, {"capecId": "CAPEC-137", "descriptions": [{"lang": "en", "value": "CAPEC-137 Parameter Injection"}]}], "affected": [{"vendor": "Algosec", "product": "Horizon Security Analyzer", "platforms": ["Linux", "64 bit"], "versions": [{"status": "affected", "version": "A33.10 (up to build 300)"}, {"status": "affected", "version": "A33.20 (up to build 170)"}, {"status": "affected", "version": "A33.30 (up to build 110)"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*"}]}]}], "descriptions": [{"lang": "en", "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows&nbsp;Privilege Escalation and Parameter Injection.<br><br>A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.&nbsp;<br><p>This issue affects&nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.<br></p>"}]}], "references": [{"url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NEGLIGIBLE", "Automatable": "YES", "Recovery": "USER", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber"}}], "solutions": [{"lang": "en", "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u00a0(build 310 and above), A33.20 (build 180 and above) and\u00a0\nA33.30 (build 120 and above).\n https://portal.algosec.com/en/downloads/hotfix_releases", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10&nbsp;(build 310 and above), A33.20 (build 180 and above) and&nbsp;\nA33.30 (build 120 and above).<br><a target=\"_blank\" rel=\"nofollow\" href=\"https://portal.algosec.com/en/downloads/hotfix_releases\">https://portal.algosec.com/en/downloads/hotfix_releases</a>"}]}], "credits": [{"lang": "en", "value": "Luis V\u00e1zquez Casta\u00f1o - https://www.linkedin.com/in/lvazcas/", "type": "finder"}, {"lang": "en", "value": "Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/", "type": "finder"}, {"lang": "en", "value": "Siemens Healthineers Red Team", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-08T12:19:17.974612Z", "id": "CVE-2026-77654", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T12:19:26.694Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-77654", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-08T12:19:17.974612Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T12:19:23.133Z"}}], "cna": {"title": "Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Luis V\u00e1zquez Casta\u00f1o - https://www.linkedin.com/in/lvazcas/"}, {"lang": "en", "type": "finder", "value": "Luis Alberto Pacheco Lorenzo - https://www.linkedin.com/in/lucholapl/"}, {"lang": "en", "type": "finder", "value": "Siemens Healthineers Red Team"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}, {"capecId": "CAPEC-137", "descriptions": [{"lang": "en", "value": "CAPEC-137 Parameter Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "USER", "baseScore": 6.1, "Automatable": "YES", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "AMBER", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Algosec", "product": "Horizon Security Analyzer", "versions": [{"status": "affected", "version": "A33.10 (up to build 300)"}, {"status": "affected", "version": "A33.20 (up to build 170)"}, {"status": "affected", "version": "A33.30 (up to build 110)"}], "platforms": ["Linux", "64 bit"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10\u00a0(build 310 and above), A33.20 (build 180 and above) and\u00a0\nA33.30 (build 120 and above).\n https://portal.algosec.com/en/downloads/hotfix_releases", "supportingMedia": [{"type": "text/html", "value": "Upgrade Horizon Foundation (formerly ASMS suite) to A33.10&nbsp;(build 310 and above), A33.20 (build 180 and above) and&nbsp;\nA33.30 (build 120 and above).<br><a target=\"_blank\" rel=\"nofollow\" href=\"https://portal.algosec.com/en/downloads/hotfix_releases\">https://portal.algosec.com/en/downloads/hotfix_releases</a>", "base64": false}]}], "references": [{"url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30.", "supportingMedia": [{"type": "text/html", "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows&nbsp;Privilege Escalation and Parameter Injection.<br><br>A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.&nbsp;<br><p>This issue affects&nbsp;Horizon Security Analyzer : A33.10, A33.20 and A33.30.<br></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "CWE-266 Incorrect privilege assignment"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:linux:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.10_up_to_build_300_:*:64_bit:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:linux:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.20_up_to_build_170_:*:64_bit:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:linux:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:algosec:horizon_security_analyzer:a33.30_up_to_build_110_:*:64_bit:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738", "shortName": "AlgoSec", "dateUpdated": "2026-09-08T10:44:32.657Z"}}}, "cveMetadata": {"cveId": "CVE-2026-77654", "state": "PUBLISHED", "dateUpdated": "2026-09-08T12:19:26.694Z", "dateReserved": "2026-08-21T04:33:36.370Z", "assignerOrgId": "ca5f073f-8266-4d43-b3e3-6eb0bb18a738", "datePublished": "2026-09-08T10:44:32.657Z", "assignerShortName": "AlgoSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Linux", "64 bit"], "product": "Horizon Security Analyzer", "vendor": "Algosec", "versions": [{"status": "affected", "version": "A33.10 (up to build 300)"}, {"status": "affected", "version": "A33.20 (up to build 170)"}, {"status": "affected", "version": "A33.30 (up to build 110)"}]}], "source": "security.vulnerabilities@algosec.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows\u00a0Privilege Escalation and Parameter Injection.\n\nA local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.\u00a0\n\n\nThis issue affects\u00a0Horizon Security Analyzer : A33.10, A33.20 and A33.30."}], "id": "CVE-2026-77654", "lastModified": "2026-09-08T14:03:48.663", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "USER", "Safety": "NEGLIGIBLE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "source": "security.vulnerabilities@algosec.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-77654", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-09-08T12:19:17.974612Z", "version": "2.0.3"}}]}, "published": "2026-09-08T11:17:44.283", "references": [{"source": "security.vulnerabilities@algosec.com", "url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm"}], "sourceIdentifier": "security.vulnerabilities@algosec.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-266"}], "source": "security.vulnerabilities@algosec.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "A33.10 (up to build 300)"}}, {"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "A33.20 (up to build 170)"}}, {"platform": ["linux", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "A33.30 (up to build 110)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Horizon Security Analyzer", "source": "cna", "vendor": "Algosec"}, "product": "horizon_security_analyzer", "vendor": "algosec"}], "created": "2026-09-08T12:30:17.811655+00:00", "updated": "2026-09-08T20:35:09.895313+00:00", "vendors": ["algosec", "algosec$PRODUCT$horizon_security_analyzer"]}