CVE-2026-29065

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

• CWE-22

• https://github.com/dgtlmoon/changedetection.io/commit/1d7d812eb0faab37042246e2fbce04f29bb1b3aaPatch
• https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4Product, Release Notes
• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-25g8-2mcf-fcx9Exploit, Vendor Advisory

Published

Mar 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2906A security flaw has been discovered in Tenda HG9 300001138. …8.8
• CVE-2026-29060Gokapi is a self-hosted file sharing server with automatic e…5
• CVE-2026-29061Gokapi is a self-hosted file sharing server with automatic e…5.4
• CVE-2026-29062jackson-core contains core low-level incremental ("streaming…7.5
• CVE-2026-29063Immutable.js provides many Persistent Immutable data structu…9.8
• CVE-2026-29064Zarf is an Airgap Native Packager Manager for Kubernetes. Fr…8.2
• CVE-2026-29066Tina is a headless content management system. Prior to 2.1.8…6.2
• CVE-2026-29067ZITADEL is an open source identity management platform. From…9.3
• CVE-2026-29068PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2026-29069Craft is a content management system (CMS). Prior to 5.9.0-b…5.3
• CVE-2026-2907A weakness has been identified in Tenda HG9 300001138. Affec…8.8
• CVE-2026-29070Open WebUI is a self-hosted artificial intelligence platform…8.1