CVE-2026-22265

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to 8.2.8.2, command injection vulnerability exists in the log viewing functionality that allows authenticated users to execute arbitrary system commands. The vulnerability is in app/modules/roxywi/logs.py line 87, where the grep parameter is used twice - once sanitized and once raw. This vulnerability is fixed in 8.2.8.2.

• CWE-78

• https://github.com/roxy-wi/roxy-wi/commit/f040d3338c4ba6f66127487361592e32e0188eeePatch
• https://github.com/roxy-wi/roxy-wi/releases/tag/v8.2.8.2Product, Release Notes
• https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-mmmf-vh7m-rm47Exploit, Vendor Advisory

Published

Jan 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2226A vulnerability has been found in DouPHP up to 1.9. This iss…7.2
• CVE-2026-22260Suricata is a network IDS, IPS and NSM engine. Starting in v…7.5
• CVE-2026-22261Suricata is a network IDS, IPS and NSM engine. Prior to vers…5.3
• CVE-2026-22262Suricata is a network IDS, IPS and NSM engine. While saving …9.8
• CVE-2026-22263Suricata is a network IDS, IPS and NSM engine. Starting in v…5.3
• CVE-2026-22264Suricata is a network IDS, IPS and NSM engine. Prior to vers…9.1
• CVE-2026-22266Dell PowerProtect Data Manager, version(s) prior to 19.22, c…8.8
• CVE-2026-22267Dell PowerProtect Data Manager, version(s) prior to 19.22, c…8.8
• CVE-2026-22268Dell PowerProtect Data Manager, version(s) prior to 19.22, c…6.5
• CVE-2026-22269Dell PowerProtect Data Manager, version(s) prior to 19.22, c…4.7
• CVE-2026-2227A vulnerability was found in D-Link DCS-931L up to 1.13.0. I…7.2
• CVE-2026-22270Dell PowerScale OneFS, versions prior to 9.10.1.6 and versio…6.7