Skip to contentBluewave-labs Checkmate vulnerabilities
- bluewave-labs checkmateCheckmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion RoutesCVE-2026-853907.1 High
- bluewave-labs checkmateCheckmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is EnabledCVE-2026-718627.5 High
- bluewave-labs checkmateCheckmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced MatchingCVE-2026-706564.9 Medium
- bluewave-labs checkmateCheckmate: Pre-auth Denial of Service via File Upload on RegistrationCVE-2026-552417.5 High
- bluewave-labs checkmatebluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password RecoveryCVE-2026-725885.3 Medium
- bluewave-labs checkmateMass Assignment Privilege Escalation in CheckmateCVE-2026-318368.1 High
- bluewave-labs checkmateCheckmate: Unauthenticated Access to Unpublished Status PageCVE-2026-308295.3 Medium
- bluewave checkmateIn BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application...CVE-2025-480245.0 Medium
- bluewave checkmateIn BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role...CVE-2025-478178.8 High
- bluewave checkmateIn BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify...CVE-2025-472458.1 High