Known Vulnerabilities for products from Roxy-wi

Listed below are 11 of the newest known vulnerabilities associated with the vendor "Roxy-wi".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-33432 json Not Provided 2026-04-20 2026-04-20
CVE-2026-33431 json Not Provided 2026-04-20 2026-04-20
CVE-2023-29004 json hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability ... 6.5 - MEDIUM 2023-04-17 2023-04-26
CVE-2023-25804 json Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limi... 5.3 - MEDIUM 2023-03-15 2023-03-19
CVE-2023-25803 json Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a dire... 7.5 - HIGH 2023-03-13 2023-03-22
CVE-2023-25802 json Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't corre... 7.5 - HIGH 2023-03-13 2023-03-22
CVE-2022-31161 json Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command c... 9.8 - CRITICAL 2022-07-15 2023-04-03
CVE-2022-31137 json Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject ... 9.8 - CRITICAL 2022-07-08 2023-05-24
CVE-2022-31126 json Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-w... 9.8 - CRITICAL 2022-07-06 2022-07-14
CVE-2022-31125 json Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-w... 9.8 - CRITICAL 2022-07-06 2023-04-03
CVE-2021-38169 json Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py. 8.8 - HIGH 2021-08-07 2021-08-13
CVE-2021-38168 json Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers. 8.8 - HIGH 2021-08-07 2021-08-12
CVE-2021-38167 json Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass ... 9.8 - CRITICAL 2021-08-07 2021-08-13