M
Vendor security profile
metabase
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
12toplam CVE
Uncertain12 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
9.3
6.9
CVE-2026-92813Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
Patch status unknownEPSS %0
6.5
CVE-2026-72900Metabase information exposure
Patch status unknownEPSS %0
10.0
CVE-2026-72899Metabase SQL injection via public card or dashboard
Patch status unknownEPSS %1
10.0
CVE-2026-72898 Actively exploitedMetabase SQL injection via password reset endpoint
Patch verified Public Exploits:10EPSS %97
9.1
7.6
8.8
CVE-2026-59827Deserialization of untrusted data in Metabase
Patch verified Public Exploits:1EPSS %4
9.1