CVE-2026-29065: Webtechnologies Changedetection

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

Affected products

• Webtechnologies Changedetection: before 0.54.4 (fixed in 0.54.4)

Published 2026-03-06. Last modified 2026-06-17.