https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:19:47 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-100853 <p>In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded from On-Demand-enabled playlists. Attackers can bypass the station operator&#39;s intended access restrictions by directly requesting media via the download endpoint using valid media identifiers, exposing private or restricted audio content.</p> <p>In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded from On-Demand-enabled playlists. Attackers can bypass the station operator&#39;s intended access restrictions by directly requesting media via the download endpoint using valid media identifiers, exposing private or restricted audio content.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-100853 https://vulnerability.circl.lu/vuln/ghsa-j79h-v95g-w786 <p>In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded from On-Demand-enabled playlists. Attackers can bypass the station operator&#39;s intended access restrictions by directly requesting media via the download endpoint using valid media identifiers, exposing private or restricted audio content.</p> <p>In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded from On-Demand-enabled playlists. Attackers can bypass the station operator&#39;s intended access restrictions by directly requesting media via the download endpoint using valid media identifiers, exposing private or restricted audio content.</p> https://vulnerability.circl.lu/vuln/ghsa-j79h-v95g-w786