CVE-2026-31836Disclosure(bluewavelabs / checkmate)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any authenticated user to escalate their privileges to superadmin, bypassing all role-based access controls. An attacker can modify their user role to gain complete administrative access to the application, including the ability to view all users, modify critical configurations, and access sensitive system data. At time of publication, there are no publicly available patches.

bluewavelabs CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-6368-x7wr-wpm2

Weakness type (CWE)

CWE-269CWE-285

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

checkmate

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-03-20); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

bluewavelabs

Products

checkmate

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-20	3	Disclosure2General1
2026-03-22	1	General1

Full discourse4 posts

The Hacker Wire@TheHackerWire203d
Disclosure
🟠 CVE-2026-31836 - High Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from... https://www.thehackerwire.com/vulnerability/CVE-2026-31836/ https://t.co/udZbOxC95G
Post summary
The tweet discloses CVE-2026-31836 affecting the Checkmate tool, providing a severity label and a link to more information, but offers no further technical or status details.
0001041
138 followersView on X
CVE@CVEnew202d
General
CVE-2026-31836 Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visuali… https://www.cve.org/CVERecord?id=CVE-2026-31836
Post summary
The tweet merely references CVE-2026-31836 in connection with an open‑source monitoring tool, but provides no vulnerability details, PoC, or exploitation information.
0000087
56.8K followersView on X
The Hacker Wire@TheHackerWire203d
General
🟠 CVE-2026-31836 - High Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from... https://www.thehackerwire.com/vulnerability/CVE-2026-31836/ https://t.co/nuEXTVYw80
Post summary
The post references a new high‑severity CVE for Checkmate, linking to a vulnerability briefing, but it does not provide technical details, proof of concept, or evidence of active exploitation.
0000040
138 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash203d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-31836 - Mass Assignment Privilege Escalation in Checkmate Intel Report: https://ift.tt/votShiU
Post summary
The alert announces CVE-2026-31836, a mass assignment privilege escalation vulnerability in Checkmate, and provides a link to an intel report but does not share a PoC, exploit code, active exploitation evidence, or patch details.
0000042
334 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	bluewavelabs	checkmate	-	-	-

Explore more

Back to dashboard bluewavelabs CVEs checkmate vulnerabilities

What researchers are saying

CVE-2026-31836

The Hacker Wire@TheHackerWireDisclosure

The tweet discloses CVE-2026-31836 affecting the Checkmate tool, providing a severity label and a link to more information, but offers no further technical or status details.

CVE@CVEnewGeneral

The tweet merely references CVE-2026-31836 in connection with an open‑source monitoring tool, but provides no vulnerability details, PoC, or exploitation information.

The Hacker Wire@TheHackerWireGeneral

The post references a new high‑severity CVE for Checkmate, linking to a vulnerability briefing, but it does not provide technical details, proof of concept, or evidence of active exploitation.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces CVE-2026-31836, a mass assignment privilege escalation vulnerability in Checkmate, and provides a link to an intel report but does not share a PoC, exploit code, active exploitation evidence, or patch details.