CVE-2022-31126

CRITICAL EXPLOITED NUCLEI

Roxy-wi <6.1.1.0 - RCE

Title source: llm

Description

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. This affects Roxy-wi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Nuri Çilengir · textwebappspython

https://www.exploit-db.com/exploits/51227

View Code ZIP pw:eip

Nuclei Templates (1)

Roxy-WI - Remote Code Execution

CRITICALVERIFIEDby ritikchaddha

Shodan: html:"Roxy-WI"

FOFA: body="roxy-wi"

References (1)

[Third Party Advisory] https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-mh86-878h-43c9

Scores

CVSS v3 10.0

EPSS 0.8995

EPSS Percentile 99.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Details

VulnCheck KEV 2023-11-13

CWE

CWE-74

Status published

Products (1)

roxy-wi/roxy-wi < 6.1.1.0

Published Jul 06, 2022

Tracked Since Feb 18, 2026