https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:39:38.964660+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-100855 fkie_cve-2026-100855 2026-09-28T14:39:38.978566+00:00

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/{station_id}/file/{id}/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media library of stations they lack permissions for.

 https://vulnerability.circl.lu/vuln/ghsa-rwfr-jcqg-x7jc GHSA-rwfr-jcqg-x7jc 2026-09-28T14:39:38.978679+00:00

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/{station_id}/file/{id}/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media library of stations they lack permissions for.