CVE-2026-92814 dgtlmoon CVE debrief

Who should care

Defenders responsible for changedetection.io installations, as well as teams monitoring notification channels for potential malicious activity, should assess exposure and prioritize verification and remediation.

Why it matters

CVE-2026-92814 is a low-severity vulnerability in changedetection.io that allows arbitrary markup injection in HTML notifications. Defenders should prioritize verification and remediation, while teams monitoring notification channels should be aware of potential malicious activity.

• Defenders must verify and update changedetection.io installations to prevent potential markup injection.
• Teams monitoring notification channels should be aware of potential malicious markup in page titles.
• Remediation priority is moderate due to the low CVSS score and limited information on exploitation.
• Further verification is needed to determine the full scope of affected systems and potential impact.

Technical summary

changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watch_title token is used in templates. The vulnerability has a CVSS score of 2.3 and is classified as LOW. Defenders should prioritize verifying and updating changedetection.io installations to prevent potential markup injection. The vulnerability affects changedetection.io versions up to 0.60.6.

Defensive priority

Defenders should prioritize verifying and updating changedetection.io installations to prevent potential markup injection.

Recommended defensive actions

• Verify changedetection.io installations for version 0.60.6 or earlier
• Update changedetection.io to a version that fixes the markup injection vulnerability
• Review notification templates for watch_title token usage
• Monitor notification channels for potential malicious markup
• Perform a thorough review of system logs for any suspicious activity related to changedetection.io
• Check for any unauthorized changes to page titles in monitored channels
• Implement additional security measures to detect and prevent similar vulnerabilities in the future

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but additional information on exploitation or affected systems is limited. The vulnerability affects changedetection.io versions up to 0.60.6. Defenders should verify and update changedetection.io installations to prevent potential markup injection. The CVE record was published on 2026-09-16T21:17:31.343Z and has not been modified since then. The NVD entry and CVE Program record offer source-provided CVE metadata and official vulnerability assessment.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.