CVE-2026-72900
Metabase information exposure
CVSS score
6.5
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2021-41277 Actively exploitedGeoJSON URL validation can expose server files and environment variables to unauthorized users
Patch verified Public Exploits:1EPSS %97
9.8
CVE-2023-38646Vulnerability in Metabase
Patch status unknown Public Exploits:9EPSS %99
10.0
CVE-2026-72898 Actively exploitedMetabase SQL injection via password reset endpoint
Patch verified Public Exploits:10EPSS %19
8.8
CVE-2026-59827Deserialization of untrusted data in Metabase
Patch verified Public Exploits:1EPSS %4
9.1
10.0
CVE-2026-72899Metabase SQL injection via public card or dashboard
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-72900"