SSRF Vulnerability in changedetection.io

changedetection.io versions up to and including 0.60.6 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability identified as CVE-2026-92815. The flaw resides in the handling of the 'Goto URL' action within browser steps. By manipulating the 'optional_value' parameter, an unauthenticated attacker can force the application to make HTTP requests to arbitrary internal IP addresses or services that are otherwise unreachable from the public internet. This allows for the discovery of internal infrastructure, unauthorized access to internal web services, and potential data exfiltration of internal-only content. Defenders should identify instances of changedetection.io and restrict the service's ability to initiate connections to sensitive internal networks.

Impact

Successful exploitation of this vulnerability allows unauthenticated actors to bypass network perimeter controls to probe internal resources. This can lead to the exposure of sensitive internal service configurations, metadata, or data contained within an organization's private network segment that the changedetection.io instance has network visibility into.

Recommendation

Prioritize patching all affected changedetection.io instances to a version later than 0.60.6. Implement network-level egress filtering to restrict the changedetection.io service container or host from reaching private IP ranges (e.g., 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and sensitive management interfaces.