Threats Tagged 'cve-2026-27696'
View all threats tagged with 'cve-2026-27696'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-27696'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-27696: CWE-918: Server-Side Request Forgery (SSRF) in dgtlmoon changedetection.ioCVE-2026-27696 0 changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request Forgery (SSRF) because the URL validation function `is_safe_valid_url()` does not validate the resolved IP address of watch URLs against private, loopback, or link-local address ranges. An authenticated user (or any user when no password is configured, which is the default) can add a watch for internal network URLs. The application fetches these URLs server-side, stores the response content, and makes it viewable through the web UI — enabling full data exfiltration from internal services. Version 0.54.1 contains a fix for the issue. Join the discussion | CVE Database V5 | 02/25/2026, 04:16:22 UTC Added: 02/25/2026, 04:56:31 UTC |
Showing 1 to 1 of 1 result