Azuracast Before 0.23.8 Ssrf Filter Bypass Via Hostname And Private Ips

Back www.vulncheck.com

Azuracast Before 0.23.8 Ssrf Filter Bypass Via Hostname And Private Ips

www.vulncheck.com • September 27, 2026

Share: View original

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Azuracast SSRF Vulnerabilities Expose Systems to Remote Attacks Two critical vulnerabilities have been identified in Azuracast versions prior to 0.23.8, allowing for Server-Side Request Forgery (SSRF) attacks. The first vulnerability enables bypassing SSRF filters through hostname and private IPs, while the second involves exploiting remote relay URLs. These vulnerabilities can lead to unauthorized access to internal services and sensitive data. Affected systems include all versions of Azuracast before 0.23.8, which is widely used for self-hosted web radio stations. No specific CVE numbers were provided in the articles. The vulnerabilities were disclosed on September 27, 2026, and users are urged to update to version 0.23.8 or later to mitigate risks. The current status indicates that real-time alerting systems are in place to monitor the vulnerability landscape. 3 sources 46

Extracted Entities

Vulnerabilities (1)

Ssrf Filter Bypass Via Hostname And Private Ips Vulnerability