{"schema_version":1,"title":"Roxy-WI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Roxy-WI: 0 in the last 7 days and 0 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-45569, was published on 10 June 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/roxy-wi","json_url":"https://junglewise.ai/threats/vendors/roxy-wi.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/roxy-wi","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":5,"all_time":14,"critical":4,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":14},"latest":[{"cve":"CVE-2026-45569","cvss":8.1,"slug":"cve-2026-45569-roxy-wi-path-traversal-in-configuration-management","title":"Roxy-WI path traversal in configuration management","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:08.433+00:00","url":"https://junglewise.ai/threats/cve-2026-45569-roxy-wi-path-traversal-in-configuration-management"},{"cve":"CVE-2026-45567","cvss":8.3,"slug":"cve-2026-45567-roxy-wi-authentication-bypass-via-url-substring-manipulation","title":"Roxy-WI authentication bypass via URL substring manipulation","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:07.957+00:00","url":"https://junglewise.ai/threats/cve-2026-45567-roxy-wi-authentication-bypass-via-url-substring-manipulation"},{"cve":"CVE-2026-45566","cvss":6.1,"slug":"cve-2026-45566-roxy-wi-open-redirect-in-login-flow-via-userinfo-syntax-bypass","title":"Roxy-WI open redirect in login flow via userinfo syntax bypass","severity":"medium","exploited":false,"published_at":"2026-06-10T16:17:07.6+00:00","url":"https://junglewise.ai/threats/cve-2026-45566-roxy-wi-open-redirect-in-login-flow-via-userinfo-syntax-bypass"},{"cve":"CVE-2026-45565","cvss":8.1,"slug":"cve-2026-45565-roxy-wi-input-validation-bypass-in-escapedstring-validator","title":"Roxy-WI input validation bypass in EscapedString validator","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:07.35+00:00","url":"https://junglewise.ai/threats/cve-2026-45565-roxy-wi-input-validation-bypass-in-escapedstring-validator"},{"cve":"CVE-2026-45564","cvss":8.8,"slug":"cve-2026-45564-roxy-wi-command-injection-in-config-versions-save-route","title":"Roxy-WI command injection in config versions save route","severity":"high","exploited":false,"published_at":"2026-06-10T15:16:37.307+00:00","url":"https://junglewise.ai/threats/cve-2026-45564-roxy-wi-command-injection-in-config-versions-save-route"},{"cve":"CVE-2026-45563","cvss":4.3,"slug":"cve-2026-45563-roxy-wi-authorization-bypass-in-history-endpoint","title":"Roxy-WI authorization bypass in history endpoint","severity":"medium","exploited":false,"published_at":"2026-06-10T15:16:37.167+00:00","url":"https://junglewise.ai/threats/cve-2026-45563-roxy-wi-authorization-bypass-in-history-endpoint"},{"cve":"CVE-2026-45561","cvss":6.5,"slug":"cve-2026-45561-roxy-wi-ssrf-in-smon-agent-routes","title":"Roxy-WI SSRF in SMON agent routes","severity":"medium","exploited":false,"published_at":"2026-06-10T15:16:37.023+00:00","url":"https://junglewise.ai/threats/cve-2026-45561-roxy-wi-ssrf-in-smon-agent-routes"},{"cve":"CVE-2026-45560","cvss":6.1,"slug":"cve-2026-45560-roxy-wi-stored-xss-in-log-viewer","title":"Roxy-WI stored XSS in log viewer","severity":"medium","exploited":false,"published_at":"2026-06-10T15:16:36.883+00:00","url":"https://junglewise.ai/threats/cve-2026-45560-roxy-wi-stored-xss-in-log-viewer"},{"cve":"CVE-2026-45559","cvss":4.9,"slug":"cve-2026-45559-roxy-wi-ldap-injection-in-get-ldap-email","title":"Roxy-WI LDAP injection in get_ldap_email","severity":"medium","exploited":false,"published_at":"2026-06-10T15:16:36.743+00:00","url":"https://junglewise.ai/threats/cve-2026-45559-roxy-wi-ldap-injection-in-get-ldap-email"},{"cve":"CVE-2026-45558","cvss":9.9,"slug":"cve-2026-45558-roxy-wi-command-injection-in-haproxy-section-save-endpoints","title":"Roxy-WI command injection in HAProxy section-save endpoints","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.6+00:00","url":"https://junglewise.ai/threats/cve-2026-45558-roxy-wi-command-injection-in-haproxy-section-save-endpoints"},{"cve":"CVE-2026-45556","cvss":9.9,"slug":"cve-2026-45556-roxy-wi-authenticated-arbitrary-file-write-in-waf-rule-save","title":"Roxy-WI authenticated arbitrary file write in WAF rule save","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.457+00:00","url":"https://junglewise.ai/threats/cve-2026-45556-roxy-wi-authenticated-arbitrary-file-write-in-waf-rule-save"},{"cve":"CVE-2026-45552","cvss":9.9,"slug":"cve-2026-45552-roxy-wi-authorization-bypass-in-install-blueprint","title":"Roxy-WI authorization bypass in install blueprint","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.303+00:00","url":"https://junglewise.ai/threats/cve-2026-45552-roxy-wi-authorization-bypass-in-install-blueprint"},{"cve":"CVE-2026-45550","cvss":9.1,"slug":"cve-2026-45550-roxy-wi-idor-in-smon-monitoring-check-update","title":"Roxy-WI IDOR in SMON monitoring check update","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.16+00:00","url":"https://junglewise.ai/threats/cve-2026-45550-roxy-wi-idor-in-smon-monitoring-check-update"},{"cve":"CVE-2026-45549","cvss":8.5,"slug":"cve-2026-45549-roxy-wi-authorization-bypass-in-smon-agent-action","title":"Roxy-WI authorization bypass in SMON agent action","severity":"high","exploited":false,"published_at":"2026-06-10T15:16:35.997+00:00","url":"https://junglewise.ai/threats/cve-2026-45549-roxy-wi-authorization-bypass-in-smon-agent-action"}],"vendor":{"hub":true,"name":"Roxy-WI","slug":"roxy-wi","homepage":"https://roxy-wi.org/","description":"Roxy-WI provides open-source solutions for managing and monitoring load balancers and web servers.","url":"https://junglewise.ai/threats/vendors/roxy-wi"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-45558","cvss":9.9,"slug":"cve-2026-45558-roxy-wi-command-injection-in-haproxy-section-save-endpoints","title":"Roxy-WI command injection in HAProxy section-save endpoints","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.6+00:00","url":"https://junglewise.ai/threats/cve-2026-45558-roxy-wi-command-injection-in-haproxy-section-save-endpoints"},{"cve":"CVE-2026-45556","cvss":9.9,"slug":"cve-2026-45556-roxy-wi-authenticated-arbitrary-file-write-in-waf-rule-save","title":"Roxy-WI authenticated arbitrary file write in WAF rule save","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.457+00:00","url":"https://junglewise.ai/threats/cve-2026-45556-roxy-wi-authenticated-arbitrary-file-write-in-waf-rule-save"},{"cve":"CVE-2026-45552","cvss":9.9,"slug":"cve-2026-45552-roxy-wi-authorization-bypass-in-install-blueprint","title":"Roxy-WI authorization bypass in install blueprint","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.303+00:00","url":"https://junglewise.ai/threats/cve-2026-45552-roxy-wi-authorization-bypass-in-install-blueprint"},{"cve":"CVE-2026-45550","cvss":9.1,"slug":"cve-2026-45550-roxy-wi-idor-in-smon-monitoring-check-update","title":"Roxy-WI IDOR in SMON monitoring check update","severity":"critical","exploited":false,"published_at":"2026-06-10T15:16:36.16+00:00","url":"https://junglewise.ai/threats/cve-2026-45550-roxy-wi-idor-in-smon-monitoring-check-update"},{"cve":"CVE-2026-45564","cvss":8.8,"slug":"cve-2026-45564-roxy-wi-command-injection-in-config-versions-save-route","title":"Roxy-WI command injection in config versions save route","severity":"high","exploited":false,"published_at":"2026-06-10T15:16:37.307+00:00","url":"https://junglewise.ai/threats/cve-2026-45564-roxy-wi-command-injection-in-config-versions-save-route"},{"cve":"CVE-2026-45549","cvss":8.5,"slug":"cve-2026-45549-roxy-wi-authorization-bypass-in-smon-agent-action","title":"Roxy-WI authorization bypass in SMON agent action","severity":"high","exploited":false,"published_at":"2026-06-10T15:16:35.997+00:00","url":"https://junglewise.ai/threats/cve-2026-45549-roxy-wi-authorization-bypass-in-smon-agent-action"},{"cve":"CVE-2026-45567","cvss":8.3,"slug":"cve-2026-45567-roxy-wi-authentication-bypass-via-url-substring-manipulation","title":"Roxy-WI authentication bypass via URL substring manipulation","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:07.957+00:00","url":"https://junglewise.ai/threats/cve-2026-45567-roxy-wi-authentication-bypass-via-url-substring-manipulation"},{"cve":"CVE-2026-45569","cvss":8.1,"slug":"cve-2026-45569-roxy-wi-path-traversal-in-configuration-management","title":"Roxy-WI path traversal in configuration management","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:08.433+00:00","url":"https://junglewise.ai/threats/cve-2026-45569-roxy-wi-path-traversal-in-configuration-management"},{"cve":"CVE-2026-45565","cvss":8.1,"slug":"cve-2026-45565-roxy-wi-input-validation-bypass-in-escapedstring-validator","title":"Roxy-WI input validation bypass in EscapedString validator","severity":"high","exploited":false,"published_at":"2026-06-10T16:17:07.35+00:00","url":"https://junglewise.ai/threats/cve-2026-45565-roxy-wi-input-validation-bypass-in-escapedstring-validator"},{"cve":"CVE-2026-45561","cvss":6.5,"slug":"cve-2026-45561-roxy-wi-ssrf-in-smon-agent-routes","title":"Roxy-WI SSRF in SMON agent routes","severity":"medium","exploited":false,"published_at":"2026-06-10T15:16:37.023+00:00","url":"https://junglewise.ai/threats/cve-2026-45561-roxy-wi-ssrf-in-smon-agent-routes"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Roxy-WI","slug":"roxy-wi","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/roxy-wi"}]}