Vulnerabilidades em azuracast
24 resultadosAnálise Vexday
AzuraCast apresenta 2 vulnerabilidades registradas na base, nenhuma em exploração ativa conhecida e nenhuma de severidade crítica, indicando risco contido. A fraqueza dominante é CWE-307 (autenticação inadequada), sugerindo que melhorias no controle de acesso devem ser priorizadas. Não há registros de vulnerabilidades publicadas nos últimos 90 dias, apontando para um panorama estável de risco.
CVE-2026-100852HIGHAzuraCast before 0.23.8 Command Injection via Streamer UsernameEPSS 4.6%CVE-2026-121429HIGHAzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()EPSS 1.5%CVE-2026-42605HIGHAzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media UploadEPSS 0.8%CVE-2023-2531HIGHImproper Restriction of Excessive Authentication Attempts in azuracast/azuracastEPSS 0.8%CVE-2026-121428HIGHAzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in TimezoneEPSS 0.7%CVE-2023-2191LOWCross-site Scripting (XSS) - Stored in azuracast/azuracastEPSS 0.5%CVE-2026-42606HIGHAzuraCast: Password Reset Poisoning via Untrusted X-Forwarded-Host Header Leads to Account Takeover and 2FA BypassEPSS 0.5%CVE-2026-100856HIGHAzuraCast before 0.23.6 Code Injection via Remote Relay PasswordEPSS 0.5%CVE-2026-100857HIGHAzuraCast before 0.23.4 Remote Code Execution via Liquidsoap string interpolationEPSS 0.4%CVE-2026-76836HIGHAzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group BypassEPSS 0.4%CVE-2026-100847HIGHAzuraCast before 0.23.8 DQL Injection via sortOrderEPSS 0.3%CVE-2026-121427HIGHAzuraCast through 0.23.8 Config Injection via frontend_config.custom_configEPSS 0.3%CVE-2026-100853HIGHAzuraCast before 0.23.8 On-Demand Download Endpoint Authorization BypassEPSS 0.3%CVE-2026-100849HIGHAzuraCast before 0.23.8 SSRF Filter Bypass via Hostname and Private IPsEPSS 0.3%CVE-2026-100850MEDIUMAzuraCast before 0.23.8 SSRF and Local File Read via Remote PlaylistEPSS 0.3%CVE-2026-121431MEDIUMAzuraCast before 0.24.0 SSRF Filter Bypass via Webhook ConnectorsEPSS 0.3%CVE-2026-100851HIGHAzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profileEPSS 0.3%CVE-2025-67737LOWAzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCEEPSS 0.2%CVE-2026-100848HIGHAzuraCast before 0.23.8 Server-Side Request Forgery via Remote Relay URLEPSS 0.2%CVE-2026-100855HIGHAzuraCast before 0.23.6 Missing Permission Check via /playEPSS 0.2%