Command Injection Vulnerability in Roxy-WI Web Interface by Roxy-WI

CVE-2026-27811

What is CVE-2026-27811?

Roxy-WI, a web interface designed for managing various server technologies, contains a command injection vulnerability in the /config/compare/<service>/<server_ip>/show endpoint. This flaw allows authenticated users to execute arbitrary system commands on the host running the application. The issue arises from the direct formatting of user input into a template string that is subsequently executed. Users are encouraged to upgrade to version 8.2.6.3, which addresses this security concern.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References