{"id":"CVE-2026-71203","title":"changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method …","summary":"changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method …","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-306"],"published":"2026-08-05","updated":"2026-08-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71203","references":[{"url":"https://github.com/dgtlmoon/changedetection.io","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"tags":["nvd","exploit-available"],"epss":0.00256,"epssPercentile":0.17532,"ingestedAt":"2026-08-10T12:39:48.229Z","exploits":{"github":1,"githubRepos":["https://github.com/Nel-droid/CVE-2026-71203-PoC"],"checkedAt":"2026-09-24T07:53:14.460Z"},"exploitAvailable":true,"slug":"CVE-2026-71203","body":"## Overview\n\nchangedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5453,"id":"CVE-2026-71203","ts":1788887284169,"field":"exploit_available","old":"false","new":"true"},{"seq":4336,"id":"CVE-2026-71203","ts":1788886398183,"field":"exploit_available","old":"true","new":"false"},{"seq":3065,"id":"CVE-2026-71203","ts":1788883061364,"field":"exploit_available","old":"false","new":"true"},{"seq":2094,"id":"CVE-2026-71203","ts":1788882466254,"field":"exploit_available","old":"true","new":"false"},{"seq":1160,"id":"CVE-2026-71203","ts":1788881903022,"field":"exploit_available","old":"false","new":"true"}]}