CVE-2021-38167: Roxy-Wi

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.

Affected products

• Roxy-Wi Roxy-Wi: up to and including 5.2.2.0

Published 2021-08-07. Last modified 2026-06-17.