Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 20:10:25 +0000 CVE-2026-100847 — AzuraCast before 0.23.8 DQL Injection via sortOrder https://db.gcve.eu/vuln/cve-2026-100847 <p><strong>Affected:</strong> AzuraCast</p> <p>AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settings.</p> <p><strong>Affected:</strong> AzuraCast</p> <p>AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settings.</p> https://db.gcve.eu/vuln/cve-2026-100847