CVE-2026-121427 - AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config
CVE ID :CVE-2026-121427 Published : Nov. 3, 2026, 2:28 p.m. | 36 minutes ago Description :AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacking the Manage station broadcasting permission, and the stored JSON is written...