London property manager breach may have exposed bank details and lockbox codes
London property manager City Relay says attackers exploited a Metabase Cloud vulnerability twice, stealing landlord bank details, passwords, and lockbox codes.
58
Product
Metabase Cloud
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 12, 2026
- Last mentionedSep 17, 2026
Timeline
2 articles · newest firstMetabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.
90
Related CVEs
by mentions- CVE-2026-7289898%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2023-3864699%9.8Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's…
Appears with
- Frameworkorganization · 2
- n8norganization · 2
- Frameworkvictim · 2
- Metabasevendor · 2
- n8nvictim · 2
- Engadgetorganization · 1
- Metabaseorganization · 1
- Wizvendor · 1
- Kilo Codeorganization · 1
- City Relayvictim · 1
- CISAvendor · 1
- Wizorganization · 1
- Kilo Codevictim · 1
- City Relayorganization · 1
- CISAorganization · 1
- Metabaseproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.