Skip to content
OpenAdvisories

Vendor

AzuraCast

25 known vulnerabilities.

Products

AzuraCast 23 azuracast/azuracast 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-121432

    AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist

    AzuraCast before 0.24.0 contains a CRLF injection vulnerability that allows low-privilege station users to inject playlist entries by embedding CR/LF sequences in mount or remote relay display_name values. Attackers with Station:MountPoints or Station:RemoteR…

    AzuraCast AzuraCast
  • Low 3.1
    CVE-2025-67737

    AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE

    AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly include an API endpoint that is intended for internal use by the SFTP software sftpgo, exposing it to the public-facing HTTP API for AzuraCast installations. A user …

    AzuraCast AzuraCast azuracast/azuracast Packagist
  • Low 3.5
    CVE-2023-2191

    Cross-site Scripting (XSS) - Stored in azuracast/azuracast

    Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18.

    AzuraCast azuracast/azuracast azuracast/azuracast Packagist