ZeroHour

Search: “reverse engineering”

597 stories

Inside the Metabase SQLi: Exploited in the Wild

Wiz reverse engineers Metabase SQLi CVE-2026-72898, exploited in the wild, using AI to speed defenses.

Wiz published an analysis of Metabase CVE-2026-72898, a SQL injection vulnerability that is being exploited in the wild. The write-up reverse engineers the flaw and applies AI to accelerate defensive guidance for responders. Organizations running Metabase should treat the flaw as actively targeted.

Wiz Blog · Aug 10, 2026Exploit / PoC in the wildCVE-2026-72898