roxy-wi — Vulnerabilities & Security Advisories 23

Roxy-WI is a web interface for managing HAProxy, Nginx, and Keepalived, primarily used for load balancer configuration and monitoring. Historically, it has been vulnerable to multiple security issues including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities. The application has accumulated 9 CVEs to date, with several allowing unauthenticated attackers to execute arbitrary commands or bypass security controls. Notable characteristics include its exposure of sensitive system information and insufficient input validation in multiple components. While no major public incidents have been widely documented, the consistent discovery of critical vulnerabilities in its codebase highlights ongoing security concerns for administrators deploying this tool in production environments.