CVE-2026-67917

creationtimestamp| type| source ---|---|--- 2026-08-18 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtenacnjjb2u...

CVE-2026-67917

zuraCast versions up to and including 0.23.7 are vulnerable to a SQL injection flaw within the backup restore functionality. The root cause is that the azuracast:restore command executes the db.sql file extracted from a backup archive without performing any content validation or sanitization . Th...