Vendor
high
advisory
Improper Authentication in dgtlmoon changedetection.io
1 rule 2 TTPs 1 CVECVE-2026-95271 is an improper authentication vulnerability in dgtlmoon changedetection.io versions up to 0.60.7, allowing remote attackers to bypass security via the check_authentication function.
changedetection.io +1
vulnerability
remote-code-execution
authentication-bypass
ssrf
web-application
1r
2t
1c
medium
advisory
changedetection.io Arbitrary Local File Read via Crafted Backup Restore
2 rules 1 TTPchangedetection.io is vulnerable to arbitrary local file read due to insufficient validation of snapshot paths restored from backup files, allowing attackers to read sensitive files by crafting a malicious backup archive containing a manipulated `history.txt` file.
changedetection.io
arbitrary-file-read
vulnerability
2r
1t