Known Vulnerabilities for products from AzuraCast
Listed below are 5 of the newest known vulnerabilities associated with the vendor "AzuraCast".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100857 json | Not Provided | 2026-09-27 | 2026-10-08 | |
| CVE-2026-100856 json | Not Provided | 2026-09-27 | 2026-10-08 | |
| CVE-2026-100855 json | Not Provided | 2026-09-27 | 2026-10-08 | |
| CVE-2026-100854 json | Not Provided | 2026-09-27 | 2026-10-08 | |
| CVE-2026-100853 json | Not Provided | 2026-09-27 | 2026-09-28 | |
| CVE-2026-100852 json | Not Provided | 2026-09-27 | 2026-09-28 | |
| CVE-2026-100851 json | Not Provided | 2026-09-27 | 2026-09-30 | |
| CVE-2026-100850 json | Not Provided | 2026-09-27 | 2026-09-30 | |
| CVE-2026-100849 json | Not Provided | 2026-09-27 | 2026-09-28 | |
| CVE-2026-100848 json | Not Provided | 2026-09-27 | 2026-09-28 | |
| CVE-2026-42606 json | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware un... | Not Provided | 2026-05-09 | 2026-07-24 |
| CVE-2026-42605 json | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request para... | Not Provided | 2026-05-09 | 2026-07-24 |
| CVE-2025-67737 json | AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly include an API endpoint that is... | Not Provided | 2025-12-12 | 2026-10-14 |
| CVE-2023-2531 json | Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3. | 9.8 - CRITICAL | 2023-05-05 | 2023-05-11 |
| CVE-2023-2191 json | Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18. | 4.8 - MEDIUM | 2023-04-20 | 2023-04-29 |