CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Metabase — security advisories

6 advisories4 exploitedlatest 2026-08-24⚡ RSS feed

Tracked Metabase products:

⚡ Watch Metabase

Get an email when a new Metabase advisory drops — max one per day, one-click unsubscribe.

Multiple vulnerabilities in Metabase (August 24, 2026)

unknownexploitedCVE-2026-72900 CVE-2026-72898 CVE-2026-72899cert-fr-avis2026-08-24

[NEW] [high] Metabase: Multiple vulnerabilities

highCVE-2026-72899 CVE-2026-72900cert-bund2026-08-11

[NEW] [critical] Metabase: Vulnerability enables SQL injection and privilege escalation

criticalcert-bund2026-08-11

CVE-2026-72898: Metabase SQL Injection Vulnerability

criticalexploitedCVE-2026-72898cisa-kev2026-08-11

CVE-2026-72898: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase insta

criticalexploitedCVSS 10CVE-2026-72898nvd2026-08-10

CVE-2021-41277: Metabase GeoJSON API Local File Inclusion Vulnerability

criticalexploitedCVE-2021-41277cisa-kev2024-11-12