Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
JPCERT/CC warns of a surge in Japanese web data leaks via mobile API abuse and Metabase SQL injection.
88
Vendor
Metabase
- Mentions · 7d0
- Mentions · 30d1
- All mentions14
- First seenAug 12, 2026
- Last mentioned23d ago
Timeline
14 articles · newest firstLondon property manager breach may have exposed bank details and lockbox codes
London property manager City Relay says attackers exploited a Metabase Cloud vulnerability twice, stealing landlord bank details, passwords, and lockbox codes.
58
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
65
Trezor warns users of email provider breach, phishing attacks
Trezor says attackers breached its third-party email provider and are phishing customers with fake STM32 entropy vulnerability alerts.
58
Trezor customers hit with phishing calls and letters after shipping-partner breach
A breach at shipping partner ShipMonk exposed data for about 67,000 additional US Trezor customers, who now face phishing calls and QR scam letters.
50
Mathspace Data Breach Exposes Over 1 Million People
Mathspace breach exposed data of 1,079,819 Australian and New Zealand users via exploited Metabase zero-day CVE-2026-72898; ShinyHunters claimed responsibility.
68
Mathspace breach exposes data on over a million students and parents
Mathspace confirmed attackers exploited an unpatched Metabase SQL injection flaw to steal personal data of 1,079,819 students, parents, and staff in Australia and New Zealand.
72
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
68
Mathspace discloses data breach affecting over 1 million people
Mathspace disclosed a Metabase breach exposing data of 1,079,819 students, parents, and staff in Australia and New Zealand.
78
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
70
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor disclosed the ShipMonk breach exposed data of 67,000 additional US customers, reportedly by ShinyHunters exploiting a Metabase zero-day SQL injection, CVE-2026-72898.
72
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Exploit-DB published an authenticated remote code execution exploit targeting Metabase version 0.61.0.
40
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog.
CISA adds three actively exploited flaws—Cisco ASA/FTD DoS, Windows Winsock SYSTEM-level UAF, and Metabase SQL injection—to its Known Exploited Vulnerabilities catalog.
76
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.
90
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2026-919829%9.8Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2025-6259360%9.4Actively Exploited Browser-Based RCE in Ray AI Compute Engine
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-203491%8.6Unauthenticated Remote DoS in Cisco ASA/FTD SSL VPN Service
- CVE-2026-688209%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2023-3864699%9.8Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's…
- CVE-2026-598002%9.29Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
- CVE-2026-33954%5.5A flaw has been found in MaxSite CMS up to 109.1
Appears with
- Metabaseproduct · 11
- ShinyHuntersthreat actor · 6
- Frameworkorganization · 5
- CISAorganization · 4
- Trezororganization · 4
- ShipMonkvendor · 4
- Tallyorganization · 3
- Trezorvendor · 3
- Metabaseorganization · 3
- ShipMonkorganization · 3
- n8nvictim · 2
- Trezorvictim · 2
- Microsoftvendor · 2
- Trezor customersvictim · 2
- Frameworkvictim · 2
- Mathspaceorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.