Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/24 6:17 p.m.•16 views

CVE-2026-76836

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

8.8CVSS0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/24 5:36 p.m.•40 views

CVE-2026-76836 AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

8.8CVSS0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/24 5:36 p.m.•16 views

EUVD-2026-65008

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

8.7CVSS5.9AI score0.00411EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/24 5:36 p.m.•15 views

CVE-2026-76836 AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

8.7CVSS5.6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/08/24 5:36 p.m.•16 views

CVE-2026-76836 AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

8.8CVSS5.9AI score0.00411EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•21 views

PT-2026-80981

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backend config property in backend/src/Entity/Station.php is annotated with GROUP GENERAL, and PUT /api/station/station id/profile/edit in...

8.8CVSS5.9AI score0.00411EPSS
SaveExploits0References6
Rows per page
Query Builder