Bbluewave-labs

Products

Exploited and recent CVEs

• CVE-2026-85390 High 7.1 Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes 0.5%
• CVE-2026-71862 High 7.5 Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled 0.5%
• CVE-2026-70656 Medium 4.9 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching 0.6%
• CVE-2026-55241 High 7.5 Checkmate: Pre-auth Denial of Service via File Upload on Registration 0.6%
• CVE-2026-72588 Medium 5.3 bluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password Recovery 0.4%
• CVE-2026-31836 High 8.1 Mass Assignment Privilege Escalation in Checkmate 0.3%
• CVE-2026-30829 Medium 5.3 Checkmate: Unauthenticated Access to Unpublished Status Page 0.4%