CVE-2026-71204

changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.

Affected products

Changedetection.Io

CVSS 3.1

6.2 MEDIUM

EPSS

0.3% (17th percentile)

Weakness

CWE-284

NVD status

Deferred

Published

2026-08-05