https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 12 Aug 2026 19:33:23 +0000 https://vulnerability.circl.lu/sighting/5081d2ba-cc4b-416e-969e-5f8a1f1cba05/export {"uuid": "5081d2ba-cc4b-416e-969e-5f8a1f1cba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzkymkk22", "content": "CVE-2026-72898 is trending. Hype score 9, currently #4 on cvemon.\n\nMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72898", "creation_timestamp": "2026-08-12T18:10:04.506044Z"} {"uuid": "5081d2ba-cc4b-416e-969e-5f8a1f1cba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzkymkk22", "content": "CVE-2026-72898 is trending. Hype score 9, currently #4 on cvemon.\n\nMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72898", "creation_timestamp": "2026-08-12T18:10:04.506044Z"} https://vulnerability.circl.lu/sighting/5081d2ba-cc4b-416e-969e-5f8a1f1cba05/export Wed, 12 Aug 2026 18:10:04 +0000 https://vulnerability.circl.lu/sighting/6eefde50-73ee-465c-9347-b43df885f8cc/export {"uuid": "6eefde50-73ee-465c-9347-b43df885f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msva5igoc62f", "content": "Metabase Hit by a Critical Zero-Day: CVE-2026-72898 Puts Business Intelligence Data at\u00a0Risk\n\nIntroduction: When the Analytics Layer Becomes the Attack Path Metabase is often treated as the quiet engine behind dashboards, reports, business intelligence, and data-driven decision-making. It may not be\u2026", "creation_timestamp": "2026-08-12T13:25:55.866984Z"} {"uuid": "6eefde50-73ee-465c-9347-b43df885f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msva5igoc62f", "content": "Metabase Hit by a Critical Zero-Day: CVE-2026-72898 Puts Business Intelligence Data at\u00a0Risk\n\nIntroduction: When the Analytics Layer Becomes the Attack Path Metabase is often treated as the quiet engine behind dashboards, reports, business intelligence, and data-driven decision-making. It may not be\u2026", "creation_timestamp": "2026-08-12T13:25:55.866984Z"} https://vulnerability.circl.lu/sighting/6eefde50-73ee-465c-9347-b43df885f8cc/export Wed, 12 Aug 2026 13:25:55 +0000 https://vulnerability.circl.lu/sighting/a5353a00-b574-4bb4-abdf-a68eae39e220/export {"uuid": "a5353a00-b574-4bb4-abdf-a68eae39e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/bishopfox.bsky.social/post/3msv7wrfi4o2f", "content": "\ud83d\udea8 Critical Metabase SQL injection (CVE-2026-72898)\n\nCVSS 10.0.\n\nNo authentication required.\n\nActively exploited in the wild.", "creation_timestamp": "2026-08-12T13:22:10.641022Z"} {"uuid": "a5353a00-b574-4bb4-abdf-a68eae39e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/bishopfox.bsky.social/post/3msv7wrfi4o2f", "content": "\ud83d\udea8 Critical Metabase SQL injection (CVE-2026-72898)\n\nCVSS 10.0.\n\nNo authentication required.\n\nActively exploited in the wild.", "creation_timestamp": "2026-08-12T13:22:10.641022Z"} https://vulnerability.circl.lu/sighting/a5353a00-b574-4bb4-abdf-a68eae39e220/export Wed, 12 Aug 2026 13:22:10 +0000 https://vulnerability.circl.lu/sighting/495530da-815d-48c6-a7a8-4f00dd758f5f/export {"uuid": "495530da-815d-48c6-a7a8-4f00dd758f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msv2jy2crg22", "content": "\ud83d\udea8 CRITICAL THREAT: CISA adds CVE-2026-72898 (Metabase SQL Injection) to the KEV catalog due to active exploitation. Unauthenticated attackers can hijack admin rights and steal database credentials. Full TSUITE brief with SPL, KQL, AQL & YARA-L: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T11:45:32.323491Z"} {"uuid": "495530da-815d-48c6-a7a8-4f00dd758f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msv2jy2crg22", "content": "\ud83d\udea8 CRITICAL THREAT: CISA adds CVE-2026-72898 (Metabase SQL Injection) to the KEV catalog due to active exploitation. Unauthenticated attackers can hijack admin rights and steal database credentials. Full TSUITE brief with SPL, KQL, AQL & YARA-L: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T11:45:32.323491Z"} https://vulnerability.circl.lu/sighting/495530da-815d-48c6-a7a8-4f00dd758f5f/export Wed, 12 Aug 2026 11:45:32 +0000 https://vulnerability.circl.lu/sighting/257a89ad-e4bf-4974-95ce-83a2acfb1030/export {"uuid": "257a89ad-e4bf-4974-95ce-83a2acfb1030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuozcdc6y2a", "content": "\ud83d\udea8 CVSS 10.0 doesn't mean 'patch soon.' It means 'drop everything and patch now.'\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-12T08:19:21.971084Z"} {"uuid": "257a89ad-e4bf-4974-95ce-83a2acfb1030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuozcdc6y2a", "content": "\ud83d\udea8 CVSS 10.0 doesn't mean 'patch soon.' It means 'drop everything and patch now.'\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-12T08:19:21.971084Z"} https://vulnerability.circl.lu/sighting/257a89ad-e4bf-4974-95ce-83a2acfb1030/export Wed, 12 Aug 2026 08:19:21 +0000 https://vulnerability.circl.lu/sighting/f7d7a7ed-82ab-4eeb-8666-43e571e9027a/export {"uuid": "f7d7a7ed-82ab-4eeb-8666-43e571e9027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "Aggiornamenti di sicurezza sanano 2 vulnerabilit\u00e0 con gravit\u00e0 \u201ccritica\u201d in Metabase, piattaforma open source di Business Intelligence (BI). Tra queste si evidenzia la CVE-2026-72898, che risulta sfruttata attivamente in rete.", "creation_timestamp": "2026-08-12T01:00:34.137527Z"} {"uuid": "f7d7a7ed-82ab-4eeb-8666-43e571e9027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "Aggiornamenti di sicurezza sanano 2 vulnerabilit\u00e0 con gravit\u00e0 \u201ccritica\u201d in Metabase, piattaforma open source di Business Intelligence (BI). Tra queste si evidenzia la CVE-2026-72898, che risulta sfruttata attivamente in rete.", "creation_timestamp": "2026-08-12T01:00:34.137527Z"} https://vulnerability.circl.lu/sighting/f7d7a7ed-82ab-4eeb-8666-43e571e9027a/export Wed, 12 Aug 2026 01:00:34 +0000 https://vulnerability.circl.lu/sighting/f3f8fc5b-8316-4210-a531-752748b9be49/export {"uuid": "f3f8fc5b-8316-4210-a531-752748b9be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-12T00:00:06.840852Z"} {"uuid": "f3f8fc5b-8316-4210-a531-752748b9be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-12T00:00:06.840852Z"} https://vulnerability.circl.lu/sighting/f3f8fc5b-8316-4210-a531-752748b9be49/export Wed, 12 Aug 2026 00:00:06 +0000 https://vulnerability.circl.lu/sighting/77df193e-eee3-4c32-8733-6a1f94a06a0b/export {"uuid": "77df193e-eee3-4c32-8733-6a1f94a06a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-12T00:00:06.759738Z"} {"uuid": "77df193e-eee3-4c32-8733-6a1f94a06a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-12T00:00:06.759738Z"} https://vulnerability.circl.lu/sighting/77df193e-eee3-4c32-8733-6a1f94a06a0b/export Wed, 12 Aug 2026 00:00:06 +0000 https://vulnerability.circl.lu/sighting/00c91996-fcb7-4ef5-9090-3603dd9b246c/export {"uuid": "00c91996-fcb7-4ef5-9090-3603dd9b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-11T23:00:03.570762Z"} {"uuid": "00c91996-fcb7-4ef5-9090-3603dd9b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-11T23:00:03.570762Z"} https://vulnerability.circl.lu/sighting/00c91996-fcb7-4ef5-9090-3603dd9b246c/export Tue, 11 Aug 2026 23:00:03 +0000 https://vulnerability.circl.lu/sighting/f88674a0-7a9e-4ed5-a0af-9212a608009d/export {"uuid": "f88674a0-7a9e-4ed5-a0af-9212a608009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-11T23:00:03.518091Z"} {"uuid": "f88674a0-7a9e-4ed5-a0af-9212a608009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-11T23:00:03.518091Z"} https://vulnerability.circl.lu/sighting/f88674a0-7a9e-4ed5-a0af-9212a608009d/export Tue, 11 Aug 2026 23:00:03 +0000