THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71203 (MEDIUM 5.3) — changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @vali

[NVD] CVE-2026-71203 (MEDIUM 5.3) — changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @vali

mednvdPublished 2026-08-05

CVE-2026-71203 CVSS: 5.3 MEDIUM Published: 2026-08-05T08:16:42.203

changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request.

Indicators of compromise

CVE-2026-71203cve
changedetection.iodomain

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71203