Metabase
In 4 briefs, most recently 8 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
2 Metabase vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2026-72898 Metabase SQL Injection Vulnerability
- CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability
Coverage in DanSec Daily
- Mathspace breach hits over 1 million users, Trezor's ShipMonk breach widens to 81,000 customers, and Adobe Commerce zero-day StyleSmuggler is patched.
- Mathspace breach hits over 1M users, MikroTik RouterOS and N-able N-central zero-days exploited, and North Korean HAProxy backdoor campaign in South Korea.
- Polish CHP plant hacked via private cellular APN, LexisNexis and Valve/CEVA breaches, and actively exploited Progress Kemp LoadMaster flaw.
- Metabase zero-day breaches customer data, Unlimited Technology Systems reports a 3.8M-person healthcare breach, and Claude Code and Gemini CLI flaws expose CI …