CVE-2026-33077

creationtimestamp| type| source ---|---|--- 2026-04-24 05:18:33+00:00| published-proof-of-concept| Telegram/wieF1Cc87yTCfYHn4YFnWJ1bAgxO-EGJdmyMzATQMYWieSQ...

CVE-2026-33077 Roxy-WI has an arbitrary file read vulnerability

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the oldconfig parameter in the haproxysectionsave interface has an arbitrary file read vulnerability. Version 8.2.6.4 fixes the issue...