PT-2026-3072 · Apache+4 · Apache+4

Chasingimpact · Publicado 2026-01-15 · Atualizado 2026-02-18 · CVE-2026-22265

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 8.2.8.2

Description Roxy-WI, a web interface for managing Haproxy, Nginx, Apache and Keepalived servers, contains a command injection issue in the log viewing functionality. Authenticated users can execute arbitrary system commands due to unsanitized input used with the grep parameter in app/modules/roxywi/logs.py line 87. The parameter is used both sanitized and raw, creating the opportunity for exploitation.

Recommendations Upgrade to Roxy-WI version 8.2.8.2 or later.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-22265

GHSA-MMMF-VH7M-RM47

Produtos afetados

Apache

Haproxy

Keepalived

Nginx

Roxy-Wi

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22265.json · Exploit
• https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-mmmf-vh7m-rm47 · Aviso do Fabricante
• https://github.com/roxy-wi/roxy-wi/commit/f040d3338c4ba6f66127487361592e32e0188eee · Correção
• https://github.com/roxy-wi/roxy-wi/releases/tag/v8.2.8.2 · Nota
• https://t.me/cveNotify/152376 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-22265 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011926084326212016 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22265 · Nota de Segurança