Azuracast
5 CVEs across 2 Azuracast products. Browse Azuracast vulnerabilities, severities, and proof-of-concept exploits.
Azuracast products with known CVEs
Azuracast CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-42606 | High | 8.1 | 2026-05-09 | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-su… |
CVE-2026-42605 | High | 8.8 | 2026-05-09 | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the currentDirectory request parameter in the Flow.js media upload… |
CVE-2025-67737 | Low | 3.1 | 2025-12-12 | AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly include an API endpoint that is intended for internal use by the… |
CVE-2023-2531 | Critical | 9.8 | 2023-05-05 | Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3. |
CVE-2023-2191 | Medium | 4.8 | 2023-04-20 | Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18. |