Skip to content
Bluewave-labs vulnerabilities
Newest
-
bluewave-labs checkmate
Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes
CVE-2026-85390
7.1 High
-
bluewave-labs checkmate
Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled
CVE-2026-71862
7.5 High
-
bluewave-labs checkmate
Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching
CVE-2026-70656
4.9 Medium
-
bluewave-labs checkmate
Checkmate: Pre-auth Denial of Service via File Upload on Registration
CVE-2026-55241
7.5 High
-
bluewave-labs checkmate
bluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password Recovery
CVE-2026-72588
5.3 Medium
-
bluewave-labs checkmate
Mass Assignment Privilege Escalation in Checkmate
CVE-2026-31836
8.1 High
-
bluewave-labs checkmate
Checkmate: Unauthenticated Access to Unpublished Status Page
CVE-2026-30829
5.3 Medium
-
bluewave checkmate
In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application...
CVE-2025-48024
5.0 Medium
-
bluewave checkmate
In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role...
CVE-2025-47817
8.8 High
-
bluewave checkmate
In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify...
CVE-2025-47245
8.1 High