CVE-2026-45552 - Roxy-WI: Cross-tenant authorization bypass on /install/* — guest can run Ansible / SSH on every registered server
CVE ID :CVE-2026-45552 Published : June 10, 2026, 3:16 p.m. | 1 hour, 59 minutes ago Description :Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required()...