AlgoSec
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Algosec FireFlow | 2 | – | Feb 15, 2024 |
| Firewall Analyzer | 2 | – | Dec 9, 2025 |
| FireFlow A32.0 | 1 | – | Oct 25, 2022 |
| FireFlow A32.10 | 1 | – | Oct 25, 2022 |
| FireFlow A32.20 | 1 | – | Oct 25, 2022 |
| Horizon Security Analyzer | 1 | – | Sep 8, 2026 |
Exploited and recent CVEs
- CVE-2026-77654 Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer 0.1%
- CVE-2025-12381 Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer 0.2%
- CVE-2025-12382 Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer 0.5%
- CVE-2023-46596 Improper input validation in FireFlow’s VisualFlow workflow editor 0.3%
- CVE-2023-46595 Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor 0.3%
- CVE-2022-36783 AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) 0.4%
- CVE-2022-36783 AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) 0.4%
- CVE-2022-36783 AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) 0.4%