https://vulnerability.circl.lu/sightings/feed 2026-08-12T19:33:24.765969+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5081d2ba-cc4b-416e-969e-5f8a1f1cba05/export 2026-08-12T19:33:24.791753+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5081d2ba-cc4b-416e-969e-5f8a1f1cba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzkymkk22", "content": "CVE-2026-72898 is trending. Hype score 9, currently #4 on cvemon.\n\nMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72898", "creation_timestamp": "2026-08-12T18:10:04.506044Z"} 2026-08-12T18:10:04.506044+00:00 https://vulnerability.circl.lu/sighting/6eefde50-73ee-465c-9347-b43df885f8cc/export 2026-08-12T19:33:24.794436+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6eefde50-73ee-465c-9347-b43df885f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msva5igoc62f", "content": "Metabase Hit by a Critical Zero-Day: CVE-2026-72898 Puts Business Intelligence Data at\u00a0Risk\n\nIntroduction: When the Analytics Layer Becomes the Attack Path Metabase is often treated as the quiet engine behind dashboards, reports, business intelligence, and data-driven decision-making. It may not be\u2026", "creation_timestamp": "2026-08-12T13:25:55.866984Z"} 2026-08-12T13:25:55.866984+00:00 https://vulnerability.circl.lu/sighting/a5353a00-b574-4bb4-abdf-a68eae39e220/export 2026-08-12T19:33:24.794587+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a5353a00-b574-4bb4-abdf-a68eae39e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/bishopfox.bsky.social/post/3msv7wrfi4o2f", "content": "\ud83d\udea8 Critical Metabase SQL injection (CVE-2026-72898)\n\nCVSS 10.0.\n\nNo authentication required.\n\nActively exploited in the wild.", "creation_timestamp": "2026-08-12T13:22:10.641022Z"} 2026-08-12T13:22:10.641022+00:00 https://vulnerability.circl.lu/sighting/495530da-815d-48c6-a7a8-4f00dd758f5f/export 2026-08-12T19:33:24.794696+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "495530da-815d-48c6-a7a8-4f00dd758f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msv2jy2crg22", "content": "\ud83d\udea8 CRITICAL THREAT: CISA adds CVE-2026-72898 (Metabase SQL Injection) to the KEV catalog due to active exploitation. Unauthenticated attackers can hijack admin rights and steal database credentials. Full TSUITE brief with SPL, KQL, AQL & YARA-L: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T11:45:32.323491Z"} 2026-08-12T11:45:32.323491+00:00 https://vulnerability.circl.lu/sighting/257a89ad-e4bf-4974-95ce-83a2acfb1030/export 2026-08-12T19:33:24.794796+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "257a89ad-e4bf-4974-95ce-83a2acfb1030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuozcdc6y2a", "content": "\ud83d\udea8 CVSS 10.0 doesn't mean 'patch soon.' It means 'drop everything and patch now.'\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-12T08:19:21.971084Z"} 2026-08-12T08:19:21.971084+00:00 https://vulnerability.circl.lu/sighting/f7d7a7ed-82ab-4eeb-8666-43e571e9027a/export 2026-08-12T19:33:24.794899+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f7d7a7ed-82ab-4eeb-8666-43e571e9027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "Aggiornamenti di sicurezza sanano 2 vulnerabilit\u00e0 con gravit\u00e0 \u201ccritica\u201d in Metabase, piattaforma open source di Business Intelligence (BI). Tra queste si evidenzia la CVE-2026-72898, che risulta sfruttata attivamente in rete.", "creation_timestamp": "2026-08-12T01:00:34.137527Z"} 2026-08-12T01:00:34.137527+00:00 https://vulnerability.circl.lu/sighting/f3f8fc5b-8316-4210-a531-752748b9be49/export 2026-08-12T19:33:24.795000+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f3f8fc5b-8316-4210-a531-752748b9be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-12T00:00:06.840852Z"} 2026-08-12T00:00:06.840852+00:00 https://vulnerability.circl.lu/sighting/77df193e-eee3-4c32-8733-6a1f94a06a0b/export 2026-08-12T19:33:24.795094+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "77df193e-eee3-4c32-8733-6a1f94a06a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-12T00:00:06.759738Z"} 2026-08-12T00:00:06.759738+00:00 https://vulnerability.circl.lu/sighting/00c91996-fcb7-4ef5-9090-3603dd9b246c/export 2026-08-12T19:33:24.795185+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "00c91996-fcb7-4ef5-9090-3603dd9b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-11T23:00:03.570762Z"} 2026-08-11T23:00:03.570762+00:00 https://vulnerability.circl.lu/sighting/f88674a0-7a9e-4ed5-a0af-9212a608009d/export 2026-08-12T19:33:24.795282+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f88674a0-7a9e-4ed5-a0af-9212a608009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-11T23:00:03.518091Z"} 2026-08-11T23:00:03.518091+00:00