{"id":"CVE-2026-71204","published":"2026-08-05T08:16:42.327","lastModified":"2026-08-10T12:17:24.150","description":"changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.","cvssScore":6.2,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-284"],"vendors":[],"products":[],"references":[{"url":"https://github.com/dgtlmoon/changedetection.io","tags":[]}],"exploitRefs":[{"url":"https://github.com/dgtlmoon/changedetection.io","tags":[]}],"hasPoc":true,"ai":null}