https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:30:12 +0000 https://cve.radiocsirt.org/vuln/cve-2026-42606 <p><strong>Affected:</strong> AzuraCast</p> <p>AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded-Host HTTP header with no trusted proxy allowlist. An unauthenticated attacker can poison the password reset URL sent to any user by injecting this header when triggering the forgot-password flow. When the victim clicks the poisoned link, their reset token is exfiltrated to the attacker&#39;s server. The attacker then uses the token on the real instance to reset the victim&#39;s password and destroy their 2FA configuration, achieving full account takeover. This issue has been patched in version 0.23.6.</p> <p><strong>Affected:</strong> AzuraCast</p> <p>AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded-Host HTTP header with no trusted proxy allowlist. An unauthenticated attacker can poison the password reset URL sent to any user by injecting this header when triggering the forgot-password flow. When the victim clicks the poisoned link, their reset token is exfiltrated to the attacker&#39;s server. The attacker then uses the token on the real instance to reset the victim&#39;s password and destroy their 2FA configuration, achieving full account takeover. This issue has been patched in version 0.23.6.</p> https://cve.radiocsirt.org/vuln/cve-2026-42606