CVE-2026-95656 dgtlmoon changedetection.io Preview Endpoint init.py add_watch_ui_snapshot server-side request forgery

🗓️ 22 Sep 2026 17:15:11Reported by VulDBType

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_watch_ui_snapshot of the file changedetectionio/blueprint/add_watch_ui/init .py of the component Preview Endpoint. Performing a ma...

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2026-95656	22 Sep 202617:15	–	cve
EUVD	EUVD-2026-84576	22 Sep 202617:15	–	euvd
NVD	CVE-2026-95656	22 Sep 202618:17	–	nvd
Vulnrichment	CVE-2026-95656 dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery	22 Sep 202617:15	–	vulnrichment

[
  {
    "vendor": "dgtlmoon",
    "product": "changedetection.io",
    "versions": [
      {
        "version": "50389b07",
        "status": "affected"
      },
      {
        "version": "0.60.1",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:dgtlmoon:changedetection.io:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Preview Endpoint"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/408412
vuldb	www.vuldb.com/vuln/408412/cti
vuldb	www.vuldb.com/cve/CVE-2026-95656
github	www.github.com/dgtlmoon/changedetection.io/
github	www.github.com/dgtlmoon/changedetection.io/commit/71d332d5a0d3da2a0fe89a392413bf4b7d27c84e
vuldb	www.vuldb.com/submit/896586
github	www.github.com/herantong/cve/blob/main/changedetection.io_ssrf-preview-endpoint_CWE-918
github	www.github.com/dgtlmoon/changedetection.io/releases/tag/0.60.1

22 Sep 2026 17:15Current

CVSS 46.9

CVSS 3.17.3

CVSS 37.3

CVSS 27.5

SSVC

CWE-918

CVE-2026-95656 dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery

CVE-2026-95656 dgtlmoon changedetection.io Preview Endpoint init.py add_watch_ui_snapshot server-side request forgery