Changedetection Vulnerabilities

Security vulnerability tracking for Webtechnologies Changedetection

Last updated: Mar 6, 2026
Total CVEs

2

Critical

0

With Exploits

1

Last 30 Days

0

Vulnerability Timeline

2 vulnerabilities discovered over time for Changedetection

Severity Distribution

Critical0
0%
High2
100%
Medium2
100%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2026-290658.8

This vulnerability allows an attacker to overwrite files on the server by uploading a specially crafted ZIP file, which can lead to unauthorized changes or access to sensitive data. It affects versions prior to 0.54.4 of the changedetection tool, so users should upgrade to the latest version to protect against this risk.

webtechnologieschangedetection
Theoretical
about 1 month agoMar 6, 2026
CVE-2026-290398.8

This vulnerability allows an attacker to read any file on the server where the changedetection.io application is running by using specially crafted XPath expressions. It can be exploited by anyone who can access the application and does not require any special permissions, making it a significant risk if not updated to the latest version.

webtechnologieschangedetection
Theoretical
about 1 month agoMar 6, 2026

About Webtechnologies Changedetection Security

This page provides comprehensive security vulnerability tracking for Webtechnologies Changedetection. Our database includes all CVEs affecting this product, updated in real-time from official sources.

Each vulnerability listing includes detailed CVSS severity analysis, exploit availability status, AI-generated explanations, and direct links to official security patches and vendor advisories.

Security Recommendations

  • • Always keep Changedetection updated to the latest version
  • • Subscribe to security advisories from Webtechnologies
  • • Monitor this page for new vulnerabilities affecting your version
  • • Prioritize patching critical and high severity issues immediately