Vulnerability · Published Sep 16, 2026 · Assigned by VulnCheck
CVE-2026-92815changedetection.io through 0.60.6 SSRF via browser-step Goto URL
High 7.5
In plain English
A high-severity server-side request forgery in changedetection.io from dgtlmoon. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 54.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses. Attackers can supply arbitrary internal URLs in the optional_value parameter to retrieve responses from restricted network locations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| dgtlmoon | changedetection.io | 0 – through 0.60.6 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- Researcher write-up, finding 2 technical-description, exploit
- action_goto_url calls page.goto with no address validation technical-description
- https://github.com/dgtlmoon/changedetection.io product
- VulnCheck Advisory: changedetection.io through 0.60.6 SSRF via browser-step Goto URL third-party-advisory