https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T11:36:46.849432+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-100847 fkie_cve-2026-100847 2026-09-30T11:36:46.881278+00:00

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settings.

 https://db.gcve.eu/vuln/ghsa-hv9j-9524-hrq6 GHSA-hv9j-9524-hrq6 2026-09-30T11:36:46.881391+00:00

AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settings.