CVE-2026-27811

creationtimestamp| type| source ---|---|--- 2026-03-18 20:17:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhecladzvw2s 2026-03-21 21:00:12+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhlwfapz6j2w 2026-03-21 21:00:14+00:00| seen|...

CVE-2026-27811 Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.3, a command injection vulnerability exists in the /config/compare///show endpoint, allowed authenticated users to execute arbitrary system commands on the app host. The vulnerability...