CVE-2026-77654

6.1 mediumEPSS 0.1%

Medium (6.1). EPSS 0.1% chance of exploitation in the next 30 days.

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Severity

CVSS 4.0

6.1 medium

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/RE:L/U:Amber

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-266
Published: 2026-09-08
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

References

https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm

Check your stack JSON