Priority HIGH 72
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
bluewave-labs
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
bluewave-labs records in CISA KEVNo bluewave-labs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
Priority HIGH 70
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
TI-2026-58598 CVE-2026-85390 · GHSA-8cvg-rxfw-4pf6
Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes
Priority MEDIUM 64
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrative actions.
Priority MEDIUM 63
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
TI-2026-49357 CVE-2026-70656
Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching
Priority MEDIUM 56
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
TI-2026-50184 CVE-2026-71862
Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled
Priority LOW 39
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
TI-2026-50845 CVE-2026-72588 · GHSA-cjr5-m69m-f39c
bluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password Recovery
Priority LOW 30
A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered.