Search: “Metabase”

8 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 11 Malware 10 Data breach 7 Vulnerability 4 Ransomware 3 Phishing & fraud 2 Industry 1 AI tools & infra 1 Policy & legal 1 AI safety & security 1

SeverityAll critical 14 high 13 medium 12 low 0 info 2

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.

Metabase disclosed a maximum-severity SQL injection affecting versions x.58 through x.63 that lets unauthenticated attackers inject SQL via the /api/session/reset_password endpoint and gain administrator access to Metabase instances. Metabase Cloud was attacked, patches were released, and CISA added CVE-2026-72898 to the KEV catalog with a federal remediation deadline of August 14, 2026. Downstream victims include Framework (customer names, IPs, addresses, phone numbers, and emails accessed), n8n (136 customer records, five with bcrypt-hashed passwords), and Kilo Code (Slack access tokens). Wiz estimates roughly 13% of cloud environments run self-hosted Metabase, with about 2,500 instances internet-accessible.

The Hacker NewsAug 12, 13:47 UTC · Aug 12, 2026Exploit / PoC in the wildCVE-2026-72898 CVE-2023-38646

Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Security AffairsAug 8, 11:53 UTC · Aug 8, 2026Exploit / PoC in the wild

Metabase zero-day exploited to access Framework customer data

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2026Exploit / PoC

Major Security Flaw Discovered in Metabase BI Software

The Hacker NewsJul 28, 05:46 UTC · Jul 28, 2023Exploit / PoC in the wildCVE-2023-38646

14th September – Threat Intelligence Report

Check Point weekly digest: Microsoft's record 974-vuln Patch Tuesday ships two actively exploited Windows zero-days; IDScan.net, Mathspace, Revolut suffer breaches.

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited privilege-escalation zero-days, CVE-2026-85880 and CVE-2026-81963, plus 20 flaws allowing unauthenticated remote code execution. Disclosed breaches include IDScan.net (identity documents), Mathspace (over 1 million people via Metabase CVE-2026-72898), Revolut, and Florida DMV (ShinyHunters). GitLab fixed critical CVSS 10.0 path traversal CVE-2026-85706, and MikroTik fixed chainable RouterOS flaws CVE-2026-67276 and CVE-2026-86060. The report also covers the PuzzleMask LLM jailbreak technique, GoldFactory's Gigabud Android fraud, and the BlueMoon Chromium exploit chain (CVE-2026-85046).

Check Point ResearchSep 14, 12:22 UTC · 2d agoExploit / PoC in the wildCVE-2026-72898 CVE-2026-85880 CVE-2026-81963+4 CVEs2· 1 read

Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited

Weekly roundup: Cisco FMC and N-able N-central zero-days exploited in the wild, MikroTik RouterOS hijacks, Microsoft Patch Tuesday ships two exploited zero-days.

State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center (FMC), alongside CVE-2026-20316. N-able issued an emergency hotfix for CVE-2026-86218, a critical pre-auth RCE in the N-central RMM platform exploited in the wild. CERT Polska disclosed six RouterOS vulnerabilities being chained to hijack internet-exposed MikroTik devices. Microsoft's September 2026 Patch Tuesday shipped a record patch count including two zero-days, while roughly 67,000 Trezor customers faced phishing after a shipping-partner breach and researchers privately disclosed a zero-click WeChat worm to Tencent.

Help Net SecuritySep 13, 08:00 UTC · 3d agoExploit / PoC in the wildCVE-2026-20079 CVE-2026-20316 CVE-2026-862182· 1 read

Experts warn of 2 flaws in open

Security AffairsSep 10, 06:50 UTC · Sep 10, 2024Exploit / PoC CVE-2022-44268 CVE-2022-44267 CVE-2016-3714

Network Security Trends: November 2021 to January 2022

Palo Alto Unit 42Jun 5, 20:41 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-38647+13 CVEs