AZ
Product
AzuraCast
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 4Low 1
Watch
Add AzuraCast to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100855 | 6.5 | Sep 27 | AzuraCast before 0.23.6 Missing Permission Check via /play Affected: before 0.23.6 |
| CVE-2026-100854 | 6.3 | Sep 27 | AzuraCast before 0.23.6 Metadata Injection via Liquidsoap API Affected: before 0.23.6 |
| CVE-2026-100853 | 5.9 | Sep 27 | AzuraCast before 0.23.8 On-Demand Download Endpoint Authorization Bypass Affected: before 0.23.8 |
| CVE-2023-2191 | 4.8 | Apr 20 | Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18 Affected: before 0.18.0 |
Showing 4