โ† ุงู„ุนูˆุฏุฉ ู„ู„ุฌุฏูˆู„
CVE-2026-40089
CVE-2026-40089 โ€” VulnCheck: Sonicverse is a Self-hosted Docker Compose stack for live radio stream
๐Ÿ“… 2026-04-09
๐Ÿ”ด Critical ๐Ÿ”ฅ No VulnCheck Exploit Containers CVSS 9.9

๐Ÿ“‹ ุงู„ูˆุตู ุงู„ูƒุงู…ู„

Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery (SSRF) vulnerability in its API client (apps/dashboard/lib/api.ts). Installations created using the provided install.sh script (including the oneโ€‘liner bash

๐Ÿ’ป ุงู„ุฃู†ุธู…ุฉ ุงู„ู…ุชุฃุซุฑุฉ

Docker

โš ๏ธ ู†ูˆุน ุงู„ุชู‡ุฏูŠุฏ

Exploit

๐Ÿ”— CVE ID

CVE-2026-40089

๐Ÿ“ก ุงู„ู…ุตุฏุฑ

VulnCheck

โœ… ุงู„ุญู„ูˆู„ ูˆุงู„ุชุฎููŠู

Refer to CVE-2026-40089 NVD advisory

๐Ÿ”— ุงู„ู…ุตุฏุฑ ุงู„ุฃุตู„ูŠ โ† ๐Ÿ“˜ NVD โ† โšก CISA KEV โ†