{"vulnerability": "CERTFR-2026-ALE-010", "sightings": [{"uuid": "27852dbd-85b0-4c47-b122-1e5151f2dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CERTFR-2026-ALE-010", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/117247591357513667", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLe CERT-FR a connaissance de nombreuses compromissions de Metabase vuln\u00e9rables \u00e0 l'injection SQL CVE-2026-72898.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "creation_timestamp": "2026-09-10T16:04:28.313974Z"}, {"uuid": "cec99e8b-d286-44e2-87a8-6580ad7b9ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CERTFR-2026-ALE-010", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p", "content": "\ud83d\udee1\ufe0f Revue cyber du 11/09/2026 :\n\ud83d\udea8 Alerte CERT-FR : injection SQL critique non authentifi\u00e9e dans Metabase, prise de contr\u00f4le admin possible.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "creation_timestamp": "2026-09-11T05:56:55.357357Z"}, {"uuid": "9435a2f0-f0bb-41e1-909a-eeb8842d10fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CERTFR-2026-ALE-010", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mvcfog3rzx2g", "content": "\ud83d\udee1\ufe0f Revue cyber du 12 septembre :\n\n\u26a0\ufe0f Alerte CERT-FR : SQLi critique non authentifi\u00e9e dans Metabase \u2192 prise de contr\u00f4le admin. Patchez.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "creation_timestamp": "2026-09-12T05:59:52.084562Z"}]}