CVE-2026-30829

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0.

• CWE-200

• https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-57xf-wg6w-fjrrExploit, Vendor Advisory

Published

Mar 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30823Flowise is a drag & drop user interface to build a customize…8.8
• CVE-2026-30824Flowise is a drag & drop user interface to build a customize…9.8
• CVE-2026-30825hoppscotch is an open source API development ecosystem. Prio…6.5
• CVE-2026-30826Combodo iTop is a web based IT service management tool. Prio…8
• CVE-2026-30827express-rate-limit is a basic rate-limiting middleware for E…7.5
• CVE-2026-30828Wallos is an open-source, self-hostable personal subscriptio…7.5
• CVE-2026-3083GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execu…8.8
• CVE-2026-30830Defuddle cleans up HTML pages. Prior to version 0.9.0, the _…6.1
• CVE-2026-30831Rocket.Chat is an open-source, secure, fully customizable co…9.8
• CVE-2026-30832Soft Serve is a self-hostable Git server for the command lin…9.1
• CVE-2026-30833Rocket.Chat is an open-source, secure, fully customizable co…5.3
• CVE-2026-30834PinchTab is a standalone HTTP server that gives AI agents di…7.5