Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-77654 EUVD-2026-72684GHSA-3pwx-5g7f-2mvm

Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by AlgoSec

Description

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.

A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. 

This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Affected products

VendorProductAffectedFixed
Algosec Horizon Security Analyzer A33.10 (up to build 300), A33.20 (up to build 170), A33.30 (up to build 110) —

References