Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-29039

25
FAUCET Score

CVE-2026-29039 is a critical vulnerability in changedetection.io versions prior to 0.54.4, allowing attackers to read arbitrary files from the filesystem. This is due to improper validation of user-supplied XPath expressions, which can leverage the unparsed-text() function for file disclosure. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk as it can be exploited remotely with low attack complexity and no user interaction. While there is no known active exploitation, publicly available exploit code, or significant community discussion, organizations using affected versions should prioritize patching to mitigate this severe risk.

Impacted Technologies

VendorProductVersion(s)CPE
< 0.54.4CPE matchmatch criteria
cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

8.8HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
PROOF_OF_CONCEPT
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.48%
Probability of exploitation in next 30 days
EPSS Percentile
39.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0048 is in the 17th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

pippatch availablevia ghsa
Product: changedetection.ioFixed in: 0.54.4

Vendor Advisories (1)

pipGHSA-6fmw-82m7-jq6phigh

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

Mar 4, 2026

References

github.com / dgtlmoon/changedetection.io/commit/417d57e5749441e4be9acc4010369bded805d66f
Patch
github.com / dgtlmoon/changedetection.io/releases/tag/0.54.4
ProductRelease Notes
github.com / dgtlmoon/changedetection.io/security/advisories/GHSA-6fmw-82m7-jq6p
ExploitVendor Advisory