What’s Vulnerable › Products

bluewave-labs Checkmate vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your bluewave-labs Checkmate version is affected

Latest bluewave-labs Checkmate vulnerabilities

• CVE-2026-85390 — Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes (CVSS 7.1)
• CVE-2026-71862 — Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled (CVSS 7.5)
• CVE-2026-70656 — Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching (CVSS 4.9)
• CVE-2026-55241 — Checkmate: Pre-auth Denial of Service via File Upload on Registration (CVSS 7.5)
• CVE-2026-72588 — bluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password Recovery (CVSS 5.3)
• CVE-2026-31836 — Mass Assignment Privilege Escalation in Checkmate (CVSS 8.1)
• CVE-2026-30829 — Checkmate: Unauthenticated Access to Unpublished Status Page (CVSS 5.3)