<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>AlgoSec — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/algosec" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by AlgoSec (algosec).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/algosec.png</url>
      <title>AlgoSec — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-77654 · 6.1 MEDIUM — Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer</title>
      <link>https://vulnogram.org/CVE-2026-77654</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77654</guid>
      <description>Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privil…</description>
      <category>Medium</category>
      <pubDate>Tue, 08 Sep 2026 10:44:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-12381 · 6.1 MEDIUM — Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer</title>
      <link>https://vulnogram.org/CVE-2025-12381</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-12381</guid>
      <description>Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a comm…</description>
      <category>Medium</category>
      <pubDate>Tue, 09 Dec 2025 13:41:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-12382 · 7.3 HIGH — Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer</title>
      <link>https://vulnogram.org/CVE-2025-12382</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-12382</guid>
      <description>Improper Limitation of a Pathname &apos;Path Traversal&apos;) vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Anal…</description>
      <category>High</category>
      <pubDate>Wed, 12 Nov 2025 09:37:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-46596 · 5.1 MEDIUM — Improper input validation in FireFlow’s VisualFlow workflow editor</title>
      <link>https://vulnogram.org/CVE-2023-46596</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-46596</guid>
      <description>Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into…</description>
      <category>Medium</category>
      <pubDate>Thu, 15 Feb 2024 06:07:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-46595 · 5.9 MEDIUM — Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor</title>
      <link>https://vulnogram.org/CVE-2023-46595</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-46595</guid>
      <description>Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)</description>
      <category>Medium</category>
      <pubDate>Thu, 02 Nov 2023 07:47:50 GMT</pubDate>
    </item>
  </channel>
</rss>
