[ORGANIZATION]

Metabase

Featured in 2 tracked stories · first seen 5 days ago

Situations

[ACTIVE] [TECHNOLOGY] [DE] [IT] [US]

Metabase zero-day SQL injection exploitation

2 clusters · 9 sources · last updated 3 days ago

Latest: Metabase software faces critical CVSS 10.0 zero-day exploitation

A critical zero-day SQL injection vulnerability in Metabase software was identified as having been actively exploited since August 3, 2026. The flaw, which carries a maximum CVSS score of 10.0, allows unauthenticated att