https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:20:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45561 <p><strong>Affected:</strong> roxy-wi</p> <p>Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the /smon/agent/{version,uptime,status,checks}/&lt;server_ip&gt; family of routes takes the URL path component verbatim into requests.get(f&#39;http://{server_ip}:{agent_port}/...&#39;). The path component is constrained only by Flask&#39;s default URL converter, which permits any value (including IPv4 literals like 169.254.169.254, RFC1918 ranges, and 127.0.0.1). At time of publication, there are no publicly available patches.</p> <p><strong>Affected:</strong> roxy-wi</p> <p>Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the /smon/agent/{version,uptime,status,checks}/&lt;server_ip&gt; family of routes takes the URL path component verbatim into requests.get(f&#39;http://{server_ip}:{agent_port}/...&#39;). The path component is constrained only by Flask&#39;s default URL converter, which permits any value (including IPv4 literals like 169.254.169.254, RFC1918 ranges, and 127.0.0.1). At time of publication, there are no publicly available patches.</p> https://cve.radiocsirt.org/vuln/cve-2026-45561