CVE-2026-30829 in Checkmate
Zusammenfassung (Englisch)
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Zuständig
GitHub_M
Reservieren
05.03.2026
Veröffentlichung
07.03.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 349593 | bluewave-labs Checkmate Endpoint :url Information Disclosure | 200 | Nicht definiert | Offizieller Fix | CVE-2026-30829 |