CVE-2026-72898 - Metabase SQL Injection Vulnerability - [Actively Exploited]
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
نُشر: Aug 10, 2026 18:18
آخر تعديل: Aug 12, 2026 15:18
