Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-42605 |
|
Path Traversal in azuracast/azuracast (CVE-2026-42605)
path traversal in azuracast/azuracast (CVE-2026-42605). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/station/{station_id}/files/upload`. Mitigation: upgrade to `0.23.6` or later.
|
| CVE-2026-42606 |
|
Vulnerability in azuracast/azuracast (CVE-2026-42606)
vulnerability in azuracast/azuracast (CVE-2026-42606). Confidential information can be exposed externally. Exploitable via ``ApplyXForwarded``. Mitigation: upgrade to `0.23.6` or later.
|