Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:azuracast:azuracast:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

AzuraCast: Configuration injection and privilege escalation (CVE-2026-121427)

AzuraCast versions 0.23.8 and earlier contain an authorization bypass vulnerability allowing users with limited permissions to inject arbitrary directives into the Shoutcast configuration file.

PoC AzuraCast privilege-escalation web-vulnerability
2t 2c
high advisory

AzuraCast DQL Injection Vulnerability in sortOrder Parameter

AzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection flaw in the sortOrder API parameter, allowing attackers to exfiltrate sensitive database contents.

AzuraCast +2 ssrf web-application vulnerability webserver broken-access-control api-security credential-exposure web-vulnerability +2
4r 3t 1c