CVE-2026-95271

Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8

Description An issue in the Authentication Hook component allows for improper authentication. A remote attacker can manipulate the check authentication() function within the changedetectionio/flask app.py file to bypass authentication mechanisms.

Recommendations Update dgtlmoon changedetection.io to a version newer than 0.60.7. As a temporary workaround, restrict access to the check authentication() function in the changedetectionio/flask app.py file.