CVE-2026-100856 | AzuraCast up to 0.23.5 Remote Relay cleanUpString Password code injection

A vulnerability was found in AzuraCast up to 0.23.5. It has been rated as critical. This affects the function cleanUpString of the component Remote Relay. Performing a manipulation of the argument Password results in code injection.

This vulnerability is identified as CVE-2026-100856. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More