Roxy Wi is a focused load-balancing and proxy management platform that occupies a niche but strategically important role in infrastructure administration and monitoring. Despite a narrow product footprint, the platform reaches a more prominent position in the vulnerability landscape than its volume alone would suggest, reflecting its deployment across critical network appliances and load-balancer management operations. The vendor's disclosed vulnerabilities span a range of application-oriented weaknesses, and defenders tracking this product should prioritize exposure assessment given the platform's access to sensitive network configuration and traffic data. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Roxy Wi over time
Signals from CVEs in this vendor scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-31137CRITICAL Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System comman | Jul 8, 2022 | 9.8 | 90 | NO | YES |
CVE-2022-31126CRITICAL Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code exe | Jul 6, 2022 | 9.8 | 76 | NO | YES |
CVE-2022-31161CRITICAL Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function | Jul 15, 2022 | 9.8 | 66 | NO | YES |
CVE-2022-31125CRITICAL Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass a | Jul 6, 2022 | 9.8 | 45 | NO | YES |
CVE-2026-27811HIGH Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the `/config/compare/<s | Mar 18, 2026 | 8.8 | 30 | NO | NO |
CVE-2026-33078CRITICAL Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save func | Apr 24, 2026 | 9.8 | 29 | NO | NO |
CVE-2026-33076CRITICAL Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that co | Apr 24, 2026 | 9.8 | 29 | NO | NO |
CVE-2021-38167CRITICAL Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication. | Aug 7, 2021 | 9.8 | 29 | NO | NO |
CVE-2026-33432CRITICAL Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions up to and including 8.2.8.2, when LDAP authentication is enabled, Roxy-WI constru | Apr 20, 2026 | 9.1 | 28 | NO | NO |
CVE-2026-33208HIGH Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the /config/ < service > /find-in-config endpoint in Roxy-WI fails | Apr 24, 2026 | 8.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (20 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Roxy Wi.
Media articles that mention a CVE ID that affects a product developed by Roxy Wi — matched by CVE ID, not by vendor name.