WhisperX tag archive

#X-Forwarded-Host

This page collects WhisperX intelligence signals tagged #X-Forwarded-Host. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-05-10 07:31:52 · Mastodon:mastodon.social:#infosec

1. CVE-2026-42606: AzuraCast Radio Suite Exposed by Trusted Header Flaw in Pre-0.23.6 Versions

A high-severity vulnerability tracked as CVE-2026-42606 has been disclosed in AzuraCast, a widely used self-hosted web radio management suite. Rated 8.1 on the CVSS scale, the flaw stems from the ApplyXForwarded middleware, which unconditionally trusts the client-supplied X-Forwarded-Host HTTP header without validating...

#CVE-2026-42606#AzuraCast#X-Forwarded-Host#header injection#vulnerability disclosure