CVE-2026-100850 | AzuraCast up to 0.23.7 AutoDJ QueueBuilder QueueBuilder.php getMediaFromRemoteUrl server-side request forgery

A vulnerability was found in AzuraCast up to 0.23.7. It has been classified as problematic. The affected element is the function getMediaFromRemoteUrl of the file backend/src/Radio/AutoDJ/QueueBuilder.php of the component AutoDJ QueueBuilder. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-100850. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More