1. Home
  2. CVE Database
  3. CVE-2026-29065
CRITICAL · 9.1

CVE-2026-29065

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path ...

Vulnerability Description

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
WebtechnologiesChangedetection< 0.54.4

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2026-29065?

CVE-2026-29065 is a vulnerability with a CVSS score of 9.1 (CRITICAL). changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path ...

How severe is CVE-2026-29065?

CVE-2026-29065 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-29065?

Check the references section above for vendor advisories and patch information. Affected products include: Webtechnologies Changedetection.