Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30829 Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visuali… https://www.cve.org/CVERecord?id=CVE-2026-30829
Post summary
The statement references CVE-2026‑30829 but lacks any actionable or technical information, merely linking to the CVE record.
CVE-2026-30829 Unauthenticated Information Disclosure in Checkmate Status Page API Before 3.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30829
Post summary
The text announces a new information disclosure vulnerability (CVE-2026-30829) affecting Checkmate's Status Page API before version 3.4.0, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bluewavelabs | checkmate | - | - | - |