< Back to situations

[ORGANIZATION]

Tally

Featured in 1 tracked story · first seen

Situations

[ACTIVE] [TECHNOLOGY] [DE] [IT] [US]

Metabase zero-day SQL injection exploitation

2 clusters · 9 sources · last updated

Latest: Metabase software faces critical CVSS 10.0 zero-day exploitation

A critical zero-day SQL injection vulnerability in Metabase software was identified as having been actively exploited since August 3, 2026. The flaw, which carries a maximum CVSS score of 10.0, allows unauthenticated att