Is CVE-2026-30829 actively exploited?

No active exploitation of CVE-2026-30829 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-30829 be exploited remotely?

Yes. CVE-2026-30829 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-30829?

CVE-2026-30829 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-30829

MEDIUM

CVE-2026-30829

CWE-200Published: March 7, 2026· Updated: Mar 11, 2026

5.3

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:9.9th

Official Description

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0.

NVD Source

Technical Analysis

CVE-2026-30829 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.