CVE-2026-71204

changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement PUBLISHED

Description (CNA)

changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.

Affected (CNA)

Vendor / product	Versions
dgtlmoon / changedetection.io	affected 0.55.7

CWE

CWE-284

References

https://github.com/dgtlmoon/changedetection.io

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.