Vulnerabilidades en azuracast
24 resultadosCVE-2026-100852HIGHAzuraCast before 0.23.8 Command Injection via Streamer UsernameEPSS 4.6%CVE-2026-121429HIGHAzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()EPSS 1.5%CVE-2026-42605HIGHAzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media UploadEPSS 0.8%CVE-2023-2531HIGHImproper Restriction of Excessive Authentication Attempts in azuracast/azuracastEPSS 0.8%CVE-2026-121428HIGHAzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in TimezoneEPSS 0.7%CVE-2023-2191LOWCross-site Scripting (XSS) - Stored in azuracast/azuracastEPSS 0.5%CVE-2026-42606HIGHAzuraCast: Password Reset Poisoning via Untrusted X-Forwarded-Host Header Leads to Account Takeover and 2FA BypassEPSS 0.5%CVE-2026-100856HIGHAzuraCast before 0.23.6 Code Injection via Remote Relay PasswordEPSS 0.5%CVE-2026-100857HIGHAzuraCast before 0.23.4 Remote Code Execution via Liquidsoap string interpolationEPSS 0.4%CVE-2026-76836HIGHAzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group BypassEPSS 0.4%CVE-2026-100847HIGHAzuraCast before 0.23.8 DQL Injection via sortOrderEPSS 0.3%CVE-2026-121427HIGHAzuraCast through 0.23.8 Config Injection via frontend_config.custom_configEPSS 0.3%CVE-2026-100853HIGHAzuraCast before 0.23.8 On-Demand Download Endpoint Authorization BypassEPSS 0.3%CVE-2026-100849HIGHAzuraCast before 0.23.8 SSRF Filter Bypass via Hostname and Private IPsEPSS 0.3%CVE-2026-100850MEDIUMAzuraCast before 0.23.8 SSRF and Local File Read via Remote PlaylistEPSS 0.3%CVE-2026-121431MEDIUMAzuraCast before 0.24.0 SSRF Filter Bypass via Webhook ConnectorsEPSS 0.3%CVE-2026-100851HIGHAzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profileEPSS 0.3%CVE-2025-67737LOWAzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCEEPSS 0.2%CVE-2026-100848HIGHAzuraCast before 0.23.8 Server-Side Request Forgery via Remote Relay URLEPSS 0.2%CVE-2026-100855HIGHAzuraCast before 0.23.6 Missing Permission Check via /playEPSS 0.2%