CVE-2026-71204

Summary

changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.

Affected Software

Weaknesses

• CWE-284: CWE-284 Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/dgtlmoon/changedetection.io

• ←Previous
• Next→