Metabase SQL injection via password reset endpoint
CVSS Skor
10.0
EPSS İhtimal
%19.0
Risk Skoru
3.8
Yayın
2 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE-2026-72898 Metabase Security Tools
Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5)
CVE-2026-72898 Metabase SQL injection lab with vulnerable and patched versions, admin session creation, CSV export, order deletion, and recovery.
Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)
Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)
CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection
Nuclei: Metabase - Unauthenticated SQL Injection
İlgili Benzer Açıklar
GeoJSON URL validation can expose server files and environment variables to unauthorized users
Vulnerability in Metabase
Deserialization of untrusted data in Metabase
Code injection in Metabase
Metabase SQL injection via public card or dashboard
Vulnerability in Metabase
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-72898"