CVE-2026-100857 | AzuraCast up to 0.23.3 ConfigWriter cleanUpString code injection

September 27, 2026 Yanac

A vulnerability was found in AzuraCast up to 0.23.3 and classified as critical. This affects the function ConfigWriter::cleanUpString of the component ConfigWriter. Such manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-100857. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More