Description
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0.
INFO
Published Date :
2026-03-07T05:46:00.460Z
Last Modified :
2026-03-10T17:58:13.860Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-30829 vulnerability.
| Vendors | Products |
|---|---|
| Bluewave-labs |
|
| Bluewavelabs |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-30829.
