Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the `/config/compare/<service>/<server_ip>/show` endpoint, allowed authenticated users to execute arbitrary system commands on the app host. The vulnerability exists in `app/modules/config/config.py` on line 362, where user input is directly formatted in the template string that is eventually executed. Version 8.2.6.3 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-18 | 5 | Disclosure4Patch1 |
| 2026-03-19 | 1 | General1 |
CVE-2026-27811 Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the `/con… https://www.cve.org/CVERecord?id=CVE-2026-27811
Post summary
The post discloses a command injection flaw in Roxy‑WI that existed before version 8.2.6.3, and upgrading to that or newer version mitigates the issue.
⚡ New CVE Alert: CVE-2026-27811 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Apache Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27811 #CVE-2026-27811 #CVE #High #Apache #CyberSecurity #InfoSec https://t.co/fXiKh3v7bR
Post summary
The tweet announces CVE-2026-27811 for Apache with a high severity rating but provides no further technical, exploit, or mitigation details.
🟠 CVE-2026-27811 - High Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the `/config/compare///show` endpo... https://www.thehackerwire.com/vulnerability/CVE-2026-27811/ https://t.co/Kw5ss5Dj9U
Post summary
The post announces a command injection vulnerability (CVE‑2026‑27811) affecting Roxy‑WI versions before 8.2.6.3, without providing any PoC, exploit code, or patch information.
CVE-2026-27811 Authenticated Command Injection in Roxy-WI Web Interface Before 8.2.6.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27811
Post summary
The text discloses CVE‑2026‑27811 as an authenticated command injection vulnerability in the Roxy‑WI web interface, without mentioning PoC, exploit code, active attacks, or a patch.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-27811 - Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE Intel Report: https://ift.tt/xs0EtYD
Post summary
The post announces CVE-2026-27811, describing a command injection that permits authenticated remote code execution in Roxy-WI. No patch, exploit, or active exploitation details are provided.
[CVE-2026-27811: HIGH] Cyber alert: Roxy-WI's versions before 8.2.6.3 have a command injection vulnerability. Upgrade to version 8.2.6.3 to fix this issue and secure your servers. #cybersecurity#cve,CVE-2026-27811,#cybersecurity https://cvefind.com/CVE-2026-27811
Post summary
An advisory for Roxy‑WI versions prior to 8.2.6.3 warns of a command injection flaw and recommends upgrading to 8.2.6.3 to remediate.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | roxy-wi | roxy-wi | - | - | - |