CVE-2026-25527 Scanner

changedetection.io is a web application designed for monitoring and detecting changes in web page content. Users can configure it to track changes on specific web pages and receive alerts for any modifications. It is widely used by individuals and organizations for monitoring website updates or changes in content. The tool can be deployed on a server and accessed via a web interface, making it a popular choice for web monitoring. It is open-source software, maintained by the community and used across various industries. Regular updates and patches are released to maintain its functionality and security.

The vulnerability detected in changedetection.io is a Path Traversal attack. This type of vulnerability allows attackers to trick the software into accessing unauthorized paths and files on the server. In this specific case, the vulnerability stems from the improper validation of the 'group' parameter in the /static// route. Unauthenticated attackers can exploit this flaw to read local application source files, potentially obtaining sensitive information. Path Traversal vulnerabilities are critical as they can lead to information disclosure or further exploitation of the system.

The technical details of the vulnerability involve a flaw in the validation of user input. By manipulating the 'group' parameter in the /static// route, attackers can perform directory traversal attacks. This allows them to access files outside the intended directory structure of the application. The endpoint in question fails to properly sanitize input, thus enabling unauthorized file reads. This kind of oversight can result in the exposure of sensitive application files, including configuration or source code files.

When the vulnerability is exploited by malicious actors, it can lead to several harmful consequences. Attackers can gain access to sensitive information contained in application files, such as database credentials or secret access keys. This can further allow attackers to compromise the entire server or application. Unauthorized file access can also lead to intellectual property theft or damage to the organization's reputation. In addition, attackers may leverage this information to perform other types of attacks, such as RCE or privilege escalation.

REFERENCES

• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-9jj8-v89v-xjvw
• https://nvd.nist.gov/vuln/detail/CVE-2026-25527