{"vulnerability": "CVE-2026-7289", "sightings": [{"uuid": "67539c9e-74b8-4474-a103-c56935beab42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7289", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116481792019638797", "content": "", "creation_timestamp": "2026-04-28T10:11:35.412484Z"}, {"uuid": "53f90e0e-6c59-48eb-aee5-9387690e1d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkl42xipa32p", "content": "", "creation_timestamp": "2026-04-28T17:24:45.206096Z"}, {"uuid": "057579d6-0e7c-4c6a-b1ad-84c889604b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkptn33p2w2o", "content": "\ud83d\udccc CVE-2026-7289 - A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulati... https://www.cyberhub.blog/cves/CVE-2026-7289", "creation_timestamp": "2026-04-30T14:37:08.073528Z"}, {"uuid": "30845d63-fd68-4d1c-8bba-c7dc7468c7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mszeuz26su2f", "content": "\u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77\n\nMetabase\u306b\u304a\u3044\u3066CVE-2026-72898\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u7d30\u5de5\u3055\u308c\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u65e2\u306b\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u6982\u5ff5\u5b9f\u8a3c\u30b3\u30fc\u30c9\u3082\u6d41\u51fa\u3057\u3066\u3044\u308b\u305f\u3081\u3001Metabase 63\u7cfb\u4ee5\u524d\u306e\u30e6\u30fc\u30b6\u30fc\u306f\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #\u60c5\u5831\u6f0f\u6d29 #CVE", "creation_timestamp": "2026-08-14T05:01:19.773544Z"}, {"uuid": "d4cd8f1b-f1be-4b7f-ab10-68af32d0a347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mszey73md7b2", "content": "\u3010JPCERT\u3011\u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260023.html\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "creation_timestamp": "2026-08-14T05:03:11.183071Z"}, {"uuid": "b30517f1-e759-4449-8f53-4abe84cec289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mszptoqd3n2g", "content": "\ud83d\udea8 A perfect 10.0 CVSS score. That's not a typo.\n\nCVE-2026-72898.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-14T08:17:25.142960Z"}, {"uuid": "d3663dab-74d3-4be0-b4c1-00ba3158c222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mszuhnltqy2c", "content": "\uff1e \u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260023.html\n", "creation_timestamp": "2026-08-14T09:40:10.264696Z"}, {"uuid": "83c51195-8846-4c5d-ab33-a946e5af2403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117107074861858582", "content": "We are also scanning & reporting Metabase IPs likely unpatched to CVE-2026-72898 SQLi, which is exploited in the wild & on CISA KEV. 2171 unpatched (version check) instances seen 2026-08-15.  Top US (603), Germany (278)\nDashboard World Map stats:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-72898%2B&data_set=count&scale=log&auto_update=on\nIP Data in our Vulnerable HTTP reporting tagged 'cve-2026-72898' : https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ (since 2026-08-11)\nNVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-72898\nMetabase advisory & patch info: https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "creation_timestamp": "2026-08-16T20:29:14.794428Z"}, {"uuid": "e74132db-6b38-4721-8cae-3ce9af5d9bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mta3wc7ys22g", "content": "Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  #JPCERTCC (Aug 14)\n\nwww.jpcert.or.jp/at/2026/at26...", "creation_timestamp": "2026-08-16T21:09:36.027932Z"}, {"uuid": "257a89ad-e4bf-4974-95ce-83a2acfb1030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuozcdc6y2a", "content": "\ud83d\udea8 CVSS 10.0 doesn't mean 'patch soon.' It means 'drop everything and patch now.'\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-12T08:19:21.971084Z"}, {"uuid": "495530da-815d-48c6-a7a8-4f00dd758f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msv2jy2crg22", "content": "\ud83d\udea8 CRITICAL THREAT: CISA adds CVE-2026-72898 (Metabase SQL Injection) to the KEV catalog due to active exploitation. Unauthenticated attackers can hijack admin rights and steal database credentials. Full TSUITE brief with SPL, KQL, AQL & YARA-L: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T11:45:32.323491Z"}, {"uuid": "a5353a00-b574-4bb4-abdf-a68eae39e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/bishopfox.bsky.social/post/3msv7wrfi4o2f", "content": "\ud83d\udea8 Critical Metabase SQL injection (CVE-2026-72898)\n\nCVSS 10.0.\n\nNo authentication required.\n\nActively exploited in the wild.", "creation_timestamp": "2026-08-12T13:22:10.641022Z"}, {"uuid": "6eefde50-73ee-465c-9347-b43df885f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msva5igoc62f", "content": "Metabase Hit by a Critical Zero-Day: CVE-2026-72898 Puts Business Intelligence Data at\u00a0Risk\n\nIntroduction: When the Analytics Layer Becomes the Attack Path Metabase is often treated as the quiet engine behind dashboards, reports, business intelligence, and data-driven decision-making. It may not be\u2026", "creation_timestamp": "2026-08-12T13:25:55.866984Z"}, {"uuid": "5081d2ba-cc4b-416e-969e-5f8a1f1cba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzkymkk22", "content": "CVE-2026-72898 is trending. Hype score 9, currently #4 on cvemon.\n\nMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72898", "creation_timestamp": "2026-08-12T18:10:04.506044Z"}, {"uuid": "3185f588-7974-453d-89f3-a8e9ed7fad00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/veltiosihello.bsky.social/post/3mswawt5x5m2j", "content": "The Metabase zero-day (CVE-2026-72898, CVSS 10) isn't your classic app bug. It grants direct SQL access to the underlying database. Credentials and API keys go exposed. We've patched dozens of these without a single incident.\n\nhttps://s.veltiosisolutions.com/AmOFk", "creation_timestamp": "2026-08-12T23:12:45.291387Z"}, {"uuid": "c5b920ec-382f-44c1-9bbe-bd7b24f8537b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswkomeo6e2y", "content": "\ud83d\udccc CVE-2026-72898 - Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access t... https://www.cyberhub.blog/cves/CVE-2026-72898", "creation_timestamp": "2026-08-13T02:07:07.513839Z"}, {"uuid": "cb625cc9-3e53-43e5-ba6d-363bc8e06043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/TuD_wnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY", "content": "", "creation_timestamp": "2026-08-17T18:00:07.189686Z"}, {"uuid": "2c4ff801-d4f9-4bcb-8fbd-e486fdb98267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-17T18:00:04.951468Z"}, {"uuid": "2708ff97-018c-48e0-88c8-d05a2ec5e6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msx7nw3zid23", "content": "CVSS 10.0 is not a typo.\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-13T08:22:32.634826Z"}, {"uuid": "73d97ab3-4365-4d4c-9f05-3b268b71d22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-08-13T08:49:19.940908Z"}, {"uuid": "919d88c9-6a2e-4f03-bea2-37100e3c76ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt3prm4idi2b", "content": "Nearly 14,000 Trezor customers had their data stolen via CVE-2026-72898, a critical Metabase zero-day exploited through logistics partner ShipMonk.\n\n#Trezor #DataBreach #Metabase #CVE202672898 #ShipMonk", "creation_timestamp": "2026-08-15T03:21:35.562849Z"}, {"uuid": "6d66573b-b58f-4da2-a080-2738588b2be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072531713464991", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\nCVE-2026-72898 Metabase SQL injection via password reset endpoint\nCVE-2026-72899 Metabase SQL injection via public card or dashboard\nCVE-2026-72900", "creation_timestamp": "2026-08-10T18:04:27.786996Z"}, {"uuid": "6594c70b-69e7-4fdd-8d29-dea3bcb016f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072531713464991", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\nCVE-2026-72898 Metabase SQL injection via password reset endpoint\nCVE-2026-72899 Metabase SQL injection via public card or dashboard\nCVE-2026-72900", "creation_timestamp": "2026-08-10T18:04:27.851395Z"}, {"uuid": "95da889d-b37f-4845-ab2a-ea329ca50f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\n  * CVE-2026-72898 Metabase SQL injection via password reset endpoint\n  * CVE-2026-72899 Metabase SQL injection via public card or dashboard\n  * CVE-2026-72900\n\n", "creation_timestamp": "2026-08-10T18:04:38.372887Z"}, {"uuid": "371e8209-7c31-469b-a13d-c0592b617ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\n  * CVE-2026-72898 Metabase SQL injection via password reset endpoint\n  * CVE-2026-72899 Metabase SQL injection via public card or dashboard\n  * CVE-2026-72900\n\n", "creation_timestamp": "2026-08-10T18:04:38.476294Z"}, {"uuid": "001bdffa-225d-4c31-8ba8-964df5451878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ca6p7rrcgjzd", "content": "CVE-2026-72899 - Metabase SQL injection via public card or dashboard\nCVE ID : CVE-2026-72899\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard th...", "creation_timestamp": "2026-08-10T18:50:56.762956Z"}, {"uuid": "2f499ed1-e1c2-4e7b-85ca-f60db5970aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2ggpjbkjd3mt", "content": "CVE-2026-72898 - Metabase SQL injection via password reset endpoint\nCVE ID : CVE-2026-72898\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database e...", "creation_timestamp": "2026-08-10T18:56:56.616870Z"}, {"uuid": "767e1052-8fcf-471b-89c1-eacad1aeb62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqtdoplmw2o", "content": "CVE-2026-72898\nMetabase's reset password feature can be exploited by an attacker to inject malicious SQL code, potentially gaining administrator access to the connected database. This vulnerability allows an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:26:06.295479Z"}, {"uuid": "14b4e191-4932-46ef-bfbf-fbebd0c53413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mt45seq34h2k", "content": "\ud83d\udea8 CVSS 10.0. That's not a typo.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-15T07:32:33.306202Z"}, {"uuid": "1e1db96b-ae0f-470c-99ac-bb0226c04c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqth7vfsp26", "content": "CVE-2026-72899\nAn attacker can inject malicious SQL code into a shared Metabase card or dashboard, potentially allowing them to access sensitive data or disrupt the system. This is a serious risk because it can happen without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:28:04.468543Z"}, {"uuid": "91eb1a66-8132-4efc-bd01-89a07507d9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-15T08:00:05.642641Z"}, {"uuid": "7c6b4084-bf95-46e8-863a-677fe220a4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.762255Z"}, {"uuid": "bb5453e6-ab34-46e6-8b28-f7bb80c997a2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80ebf1f6-0e2d-47d9-8e7d-dbef120a1e0f", "content": "", "creation_timestamp": "2026-08-10T21:00:26.046615Z"}, {"uuid": "97352ce8-56ef-4736-9512-14ea900a9340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/TuD_wnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY", "content": "", "creation_timestamp": "2026-08-18T00:00:08.782727Z"}, {"uuid": "1300b03a-93b1-4fa8-97f3-2d8fc33d0b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-18T00:00:11.283854Z"}, {"uuid": "6fe37a59-1c4e-405f-ba60-7c32c3f2ae8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-22", "content": "", "creation_timestamp": "2026-08-11T08:45:05.925004Z"}, {"uuid": "42e43883-fb5e-4f17-9aba-d3f469dad666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-22", "content": "", "creation_timestamp": "2026-08-11T08:45:08.259174Z"}, {"uuid": "f1ae06f6-2661-42b7-b669-461b0e98f4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/rwatimes.bsky.social/post/3mtnvtjz5fw2d", "content": "Crypto breaches 2026: shipping leaks fuel wrench attacks\nAug 18 2026 08:50 UTC\nThree hardware wallet and broker breaches exposed millions of shipping addresses, fueling a wave of crypto wrench attacks.\n#wrench-attacks #data-breaches #hardware-wallets #metabase-vulnerability #cve-2026-72898", "creation_timestamp": "2026-08-22T08:57:58.266047Z"}, {"uuid": "9c83d917-0347-40b2-8e5d-630d194f32b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msxkgm3jhh24", "content": "(CISA TS-SOC) CVE-2026-72898 \u2013 Metabase SQL Injection\u00a0Vulnerability\n\nSeverity: CRITICAL Impact Summary: Allows unauthenticated attackers to gain administrator access, modify configuration, steal credentials, and exfiltrate data from connected databases via SQL\u2026\n\nhttps://thecybermind.co/join", "creation_timestamp": "2026-08-13T11:35:18.477640Z"}, {"uuid": "14062b55-004e-4fcb-9eb6-724e9870a7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "", "creation_timestamp": "2026-08-11T12:15:03.622545Z"}, {"uuid": "a81831ff-2161-4673-a9e2-03454ae41541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mt5bbi7qcc24", "content": "Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS 10.0, Wide Blast Radius", "creation_timestamp": "2026-08-15T18:07:58.377991Z"}, {"uuid": "54d6bff0-e908-4264-9822-99d6995af5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.479364Z"}, {"uuid": "8ca8d508-851d-4698-9d1c-d0d501bd645b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4cee6c5-5cc3-4ef7-bfc1-d8f189329f23", "content": "", "creation_timestamp": "2026-08-11T20:00:02.617632Z"}, {"uuid": "e9a53c3e-7d9b-43cf-9b3e-bfa150179b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mstgkbgaqq2i", "content": "\ud83d\uded1 CVE-2026-72898\nMetabase Metabase\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset\u2026\nhttps://cvesentinel.com/report/CVE-2026-72898?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-11T20:15:07.702605Z"}, {"uuid": "7b91ba46-ccaf-488f-a23a-d1a99de73bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mstgohp7m52v", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities (Cisco ASA/FTD, Windows WinSock, Metabase) to the KEV Catalog.\n-\nIOCs: CVE-2026-20349, CVE-2026-68820, CVE-2026-72898\n-\n#CISA #CVE #ThreatIntel", "creation_timestamp": "2026-08-11T20:17:28.207812Z"}, {"uuid": "8fa14bd0-8fe3-42a4-94f9-5e46c22e90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-16T00:00:45.967541Z"}, {"uuid": "a0ac97a3-95fd-4ec5-a531-f0d9d0e90e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mstmts2uu524", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72898: Metabase SQL Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72898", "creation_timestamp": "2026-08-11T22:07:49.530642Z"}, {"uuid": "9cb50cab-a888-49e9-b04b-e515e22a7eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 21:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 - Metabase\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T23:00:03.352598Z"}, {"uuid": "f88674a0-7a9e-4ed5-a0af-9212a608009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-11T23:00:03.518091Z"}, {"uuid": "00c91996-fcb7-4ef5-9090-3603dd9b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-11T23:00:03.570762Z"}, {"uuid": "ba7da91c-e4eb-4ff7-bee5-fc13680d1bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 21:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 - Metabase\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T00:00:07.637820Z"}, {"uuid": "77df193e-eee3-4c32-8733-6a1f94a06a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-12T00:00:06.759738Z"}, {"uuid": "f3f8fc5b-8316-4210-a531-752748b9be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-12T00:00:06.840852Z"}, {"uuid": "f7d7a7ed-82ab-4eeb-8666-43e571e9027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "Aggiornamenti di sicurezza sanano 2 vulnerabilit\u00e0 con gravit\u00e0 \u201ccritica\u201d in Metabase, piattaforma open source di Business Intelligence (BI). Tra queste si evidenzia la CVE-2026-72898, che risulta sfruttata attivamente in rete.", "creation_timestamp": "2026-08-12T01:00:34.137527Z"}, {"uuid": "9c32c9a6-b6ca-4a97-bd87-3f956b7e4c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.859437Z"}, {"uuid": "f94a9b27-7dcf-4644-9d20-53bff44c7a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117140433676918715", "content": "\ud83d\udea8\ud83c\uddeb\ud83c\uddf7 iMapper allegedly breached through critical Metabase vulnerability, account data and database access leaked on a cybercrime forum\u2800A forum actor claims to have compromised iMapper, a French web-connected 2D laser measurement platform for building professionals, using a vulnerability identified in the listing as CVE-2026-72898 with a claimed CVSS score of 10.0.\u2800The exposed account dataset reportedly contains 2,463 records and includes:\u2800\u2022 User IDs and usernames\u2022 Password hashes\u2022 Account roles\u2022 Email addresses\u2022 Phone numbers\u2022 Professions\u2022 MFA status and related metadata\u2022 Language preferences\u2022 Stripe customer IDs\u2022 Stripe tax-related identifiers\u2022 Measurement and display configuration fields\u2800The data is being distributed in XLSX format. The listing also claims the compromised environment contains additional database tables and offers credentials that could provide access to those systems.\u2800The claims, exploitation method and authenticity, availability and scope of the allegedly exposed data and database access have not been independently verified.\u2800\ud83d\udca5 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing", "creation_timestamp": "2026-08-22T17:52:49.042082Z"}, {"uuid": "e95ee15e-45b0-459b-9418-5e2aa7767b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.973124Z"}, {"uuid": "090d64a6-2878-451b-8e62-ba8f887275d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.048517Z"}, {"uuid": "e5d7f865-91e0-4db0-9928-7c6d7a7bd8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98444", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-safe-detection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Franc-Zar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 09:42:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.514003Z"}, {"uuid": "c145865f-71bd-41d2-a183-b5338cb6e05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtwh4wgk5z24", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\n\n", "creation_timestamp": "2026-08-25T18:28:44.420011Z"}, {"uuid": "df1a9dfe-4956-4c25-87c4-55aa2b0503de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtwhauzptu25", "content": "CVE-2026-72898: Critical Metabase SQL Injection Is Being Actively Exploited, Allowing Unauthenticated Admin\u00a0Takeover\n\nCVE-2026-72898 is a critical Metabase SQL injection flaw actively exploited in the wild. Learn affected\u2026\n\nhttps://thecybersecguru.com/exploits/cve-2026-72898-metabase-sql-injection/", "creation_timestamp": "2026-08-25T18:30:57.544982Z"}, {"uuid": "b98a6c64-3c42-4f73-9cdb-24fe720cf240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.120083Z"}, {"uuid": "9aabcc0a-220b-4723-bb5a-ceb19dbde120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/information_security_channel/55797", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\nhttps://www.offsec.com/blog/cve-2026-72898-2/\n\nCVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it. \nThe post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability (https://www.offsec.com/blog/cve-2026-72898-2/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-08-25T20:00:04.085410Z"}, {"uuid": "8c1a7ed9-b56a-447b-9e8c-6946fe125704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98444", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-safe-detection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Franc-Zar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 09:42:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.187451Z"}, {"uuid": "d31187e4-c133-4b85-ba09-82453181e6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.420926Z"}, {"uuid": "4cad15da-4e78-461b-bffa-fb4007a1ed5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.494766Z"}, {"uuid": "7870f6a7-479b-4a0b-becf-0c595da46944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.733452Z"}, {"uuid": "29017148-c03a-4dda-832c-2036e7adf790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/jw3wLgXyVg6x4Mx6yR86O-CQYtg0OBJAqHiZTCrWMBQGt0U", "content": "", "creation_timestamp": "2026-08-26T20:00:04.016382Z"}, {"uuid": "ccf81cf6-b8bd-4f61-887f-9a5e83d84d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.922909Z"}, {"uuid": "29c10ae7-82e3-438b-9518-59b933f20d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:58.484158Z"}, {"uuid": "53f98ee7-42d3-446a-ad1c-b4a0a08e11c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/55797", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\nhttps://www.offsec.com/blog/cve-2026-72898-2/\n\nCVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it. \nThe post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability (https://www.offsec.com/blog/cve-2026-72898-2/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-08-26T00:00:08.474904Z"}, {"uuid": "f07e668a-9416-49cb-b57c-eed5e993139a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99841", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-metabase-sqli\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d-maggipinto\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 18:37:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T23:00:04.240443Z"}, {"uuid": "a6648326-e78f-4d63-a4db-67b3b82bb066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99841", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-metabase-sqli\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d-maggipinto\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 18:37:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:07.815969Z"}, {"uuid": "e42b5ce7-15da-4e09-9a01-3c51a41844ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/jw3wLgXyVg6x4Mx6yR86O-CQYtg0OBJAqHiZTCrWMBQGt0U", "content": "", "creation_timestamp": "2026-08-27T00:00:08.278280Z"}, {"uuid": "ef8f08ee-754a-4a81-9491-98c7a591c442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/504", "content": "poc: https://github.com/EQSTLab/CVE-2026-72898", "creation_timestamp": "2026-08-29T00:00:07.151810Z"}, {"uuid": "bfdf0c76-ee23-4685-897e-52e84716f559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/captainsmok3r_official/503", "content": "CVE-2026-72898 Metabase password-reset unauthenticated SQL injection", "creation_timestamp": "2026-08-29T00:00:07.181900Z"}, {"uuid": "5de7c772-b31c-4313-8feb-04bd4c931e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.667471Z"}, {"uuid": "321a7d7a-0348-493e-8eab-5ddaf1a32930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.000843Z"}, {"uuid": "684f6d4d-ff6d-4bd7-a772-6f91029af198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mttbs4dbmu2r", "content": "\ud83d\udd17 CVE : CVE-2026-72898, CVE-2026-72899, CVE-2026-72900", "creation_timestamp": "2026-08-24T12:15:13.977900Z"}, {"uuid": "4aadd367-f358-4bbd-8c22-99f26fcd4706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72899", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mttbs4dbmu2r", "content": "\ud83d\udd17 CVE : CVE-2026-72898, CVE-2026-72899, CVE-2026-72900", "creation_timestamp": "2026-08-24T12:15:14.086530Z"}, {"uuid": "8d3def61-a87f-40c2-89ac-4bcee9bc7b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T10:00:03.275737Z"}, {"uuid": "4d9d84aa-b9b9-4d46-809d-ab162e4d35de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3muiqb36o422l", "content": "CVE-2026-72898 (CVSS 10.0) has been in the wild for over a week. N8n and Kilo Code are the latest victims, joining the first-wave roster. The week-two pattern: SMB self-hosted Metabase is the soft target. Audit every instance + run the compromise-hunting query: https://secureinseconds.com/blog/2026-", "creation_timestamp": "2026-09-02T01:00:02.524008Z"}, {"uuid": "4ed678d6-9193-4457-abbb-f7fb1b2c2519", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7b332c1-4b08-4624-8978-0b760d815633", "content": "", "creation_timestamp": "2026-09-02T01:01:01.750222Z"}, {"uuid": "32ad2992-5e04-43f4-949b-59ab8d776fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/all_free_premium_courses/835", "content": "\u26a0\ufe0fCVE-2026-72898 (CVSS 10.0)\u26a0\ufe0f\n\nYour Metabase's \"forgot password\" page will run an attacker's SQL. \ud83d\ude31\n\nNo login. No account. An attacker just POSTs to /api/session/reset_password with a crafted user-id \u2014 Metabase drops it straight into a database query with zero validation. Full unauthenticated SQL injection: dump admin credentials, session tokens, the whole app DB.\n\nIf you self-host Metabase, patch to the latest release now.\n\n\ud83d\udd25PoC + setup: github.com/EQSTLab/CVE-2026-72898\n\n@all_free_premium_courses", "creation_timestamp": "2026-09-03T13:00:04.363631Z"}, {"uuid": "19eb4064-434d-4433-80fc-4b3db08f5ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/all_free_premium_courses/835", "content": "\u26a0\ufe0fCVE-2026-72898 (CVSS 10.0)\u26a0\ufe0f\n\nYour Metabase's \"forgot password\" page will run an attacker's SQL. \ud83d\ude31\n\nNo login. No account. An attacker just POSTs to /api/session/reset_password with a crafted user-id \u2014 Metabase drops it straight into a database query with zero validation. Full unauthenticated SQL injection: dump admin credentials, session tokens, the whole app DB.\n\nIf you self-host Metabase, patch to the latest release now.\n\n\ud83d\udd25PoC + setup: github.com/EQSTLab/CVE-2026-72898\n\n@all_free_premium_courses", "creation_timestamp": "2026-09-04T00:00:49.595737Z"}, {"uuid": "65068b45-e6a8-4f11-8b79-a761f3289a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:18.774174Z"}, {"uuid": "4405e288-9718-4d27-9c7f-54d9ea2615f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/HackerNewscyber/3422", "content": "\u2708 \u0646\u0634\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0646\u0641\u0631 \u062f\u0631 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633\n\n\u00a9\ufe0f \u067e\u0644\u062a\u0641\u0631\u0645 \u0622\u0645\u0648\u0632\u0634\u06cc \u00ab\u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633\u00bb \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062a\u0627\u0628\u06cc\u0633 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06f1\u066c\u06f0\u06f7\u06f9\u066c\u06f8\u06f1\u06f9 \u0646\u0641\u0631 \u062f\u0631 \u0627\u0633\u062a\u0631\u0627\u0644\u06cc\u0627 \u0648 \u0646\u06cc\u0648\u0632\u06cc\u0644\u0646\u062f \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0641\u0648\u0630 \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-72898 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f1\u06f0 \u0627\u0632 \u06f1\u06f0 \u0631\u062e \u062f\u0627\u062f\u061b \u0646\u0642\u0635\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u0633\u0637\u062d \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06f6 \u0627\u0648\u062a \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u060c \u0627\u0645\u0627 \u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633 \u062a\u0627 \u06f2\u06f9 \u0627\u0648\u062a \u0633\u0627\u0645\u0627\u0646\u0647 \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0646\u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0641\u0634\u0627\u0634\u062f\u0647 \u0634\u0627\u0645\u0644 \u0646\u0627\u0645\u060c \u0627\u06cc\u0645\u06cc\u0644\u060c \u0634\u0646\u0627\u0633\u0647 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0628\u0631\u062e\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f \u0628\u0648\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0627\u0641\u0634\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u06cc\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-09T03:00:06.080569Z"}, {"uuid": "3c741def-fa54-4854-b7b2-607b36030f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/HackerNewscyber/3422", "content": "\u2708 \u0646\u0634\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0646\u0641\u0631 \u062f\u0631 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633\n\n\u00a9\ufe0f \u067e\u0644\u062a\u0641\u0631\u0645 \u0622\u0645\u0648\u0632\u0634\u06cc \u00ab\u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633\u00bb \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062a\u0627\u0628\u06cc\u0633 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06f1\u066c\u06f0\u06f7\u06f9\u066c\u06f8\u06f1\u06f9 \u0646\u0641\u0631 \u062f\u0631 \u0627\u0633\u062a\u0631\u0627\u0644\u06cc\u0627 \u0648 \u0646\u06cc\u0648\u0632\u06cc\u0644\u0646\u062f \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0641\u0648\u0630 \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-72898 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f1\u06f0 \u0627\u0632 \u06f1\u06f0 \u0631\u062e \u062f\u0627\u062f\u061b \u0646\u0642\u0635\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u0633\u0637\u062d \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06f6 \u0627\u0648\u062a \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u060c \u0627\u0645\u0627 \u0645\u064e\u062b\u200c\u0627\u0650\u0633\u067e\u0650\u06cc\u0633 \u062a\u0627 \u06f2\u06f9 \u0627\u0648\u062a \u0633\u0627\u0645\u0627\u0646\u0647 \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0646\u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0641\u0634\u0627\u0634\u062f\u0647 \u0634\u0627\u0645\u0644 \u0646\u0627\u0645\u060c \u0627\u06cc\u0645\u06cc\u0644\u060c \u0634\u0646\u0627\u0633\u0647 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0628\u0631\u062e\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f \u0628\u0648\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0627\u0641\u0634\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u06cc\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-10T00:00:54.687602Z"}, {"uuid": "6626f738-3e46-4279-b3ac-b2282e17cbd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mv6gjn264y2a", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\n\nLe CERT-FR a connaissance de nombreuses compromissions de Metabase vuln\u00e9rables \u00e0 l'injection SQL CVE-2026-72898.\n\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-09-10T16:04:26.482871Z"}, {"uuid": "bab18352-09e9-451f-a3bc-abb5b08600d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/117247591357513667", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLe CERT-FR a connaissance de nombreuses compromissions de Metabase vuln\u00e9rables \u00e0 l'injection SQL CVE-2026-72898.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "creation_timestamp": "2026-09-10T16:04:28.274926Z"}, {"uuid": "a8a098f6-78a7-4b40-820d-87b8307b64f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mva5grljws2j", "content": "\u26a0\ufe0f Vuln\u00e9rabilit\u00e9 Metabase\n\n\ud83d\udce2 Le CERT-FR publie une alerte de s\u00e9curit\u00e9 ayant connaissance de compromissions de Metabase vuln\u00e9rables \u00e0 l'injection SQL CVE-2026-72898.\n\nPlus d'informations sur :\n\u27a1\ufe0f  www.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-09-11T08:27:10.981339Z"}, {"uuid": "8027e564-5170-494e-b03f-3bfddf3a3d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvab53dnbc2a", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date August 11, 2026\n\nCVE-2026-20349 Cisco Secure Firewall Adaptive Security A...\nCVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability\nCVE-2026-72898 Metabase SQL Injection Vulnerability", "creation_timestamp": "2026-09-11T09:33:15.538896Z"}, {"uuid": "d712f61b-6793-4e06-aba4-688e9dd91cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvacbwoxhs2a", "content": "\u7c73\u5f53\u5c40\u3001Metabase\u88fdBI\u30c4\u30fc\u30eb\u3084Cisco\u88fdFW\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001Metabase\u306e\u30c7\u30fc\u30bf\u5206\u6790\u30c4\u30fc\u30eb\u3084Cisco\u88fd\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u5668\u3001\u300cWindows\u300d\u306a\u3069\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30783\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-72898\u300d\u300cCVE-2026-68820\u300d\u300cCVE-2026-20349\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-72898\u300d\u306f\u3001Metabase\u304c\u958b\u767a\u3059\u308b\u30c7\u30fc\u30bf\u5206\u6790\u3084\u53ef\u8996\u5316\u3092\u884c\u3046BI\u30c4...", "creation_timestamp": "2026-09-11T09:53:53.066698Z"}, {"uuid": "52b71815-3a83-42bf-987e-8af33f50e2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvch5kxmqv2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 42 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-44756: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85706: 10 interactions\nCVE-2026-72898: 9 interactions\nCVE-2026-20349: 8 interactions\n", "creation_timestamp": "2026-09-12T06:26:14.483657Z"}, {"uuid": "62357ded-5772-4e5e-b55d-63676f4fce95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/02ctUQycjNjFPqLwmLBIrjRFFWTqwUuikF01iS0Ac-Ddxhc", "content": "", "creation_timestamp": "2026-09-12T12:00:05.270083Z"}, {"uuid": "280177d4-91e8-4bb8-99e1-a13b1d2a66f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/tGb9L7euDfeYThWYhT-cab5300O0eDUYoPBCnnzkCpISc6s", "content": "", "creation_timestamp": "2026-09-12T16:00:08.908771Z"}, {"uuid": "4a1ccf2c-cfcf-418e-8cbf-d767baaff234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/ZlMgotv1IsimQAPQFiRpKkAA7cHUUgtY2LhNGkIvgGIIDWA", "content": "", "creation_timestamp": "2026-09-12T22:00:05.781018Z"}, {"uuid": "23c114de-ffc4-4c52-8256-da14cbf5a29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/wBXPDx1UQ-Ab7u42urAXdxtN0KbsZJHH-dGmUfiKf8tOYzk", "content": "", "creation_timestamp": "2026-09-13T15:00:05.109010Z"}, {"uuid": "97d0c08c-1319-4096-a11f-470404072f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "Telegram/ZlMgotv1IsimQAPQFiRpKkAA7cHUUgtY2LhNGkIvgGIIDWA", "content": "", "creation_timestamp": "2026-09-13T00:00:05.844290Z"}, {"uuid": "b512f0ff-0940-4804-8a9b-1a0f3fdcad6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/tGb9L7euDfeYThWYhT-cab5300O0eDUYoPBCnnzkCpISc6s", "content": "", "creation_timestamp": "2026-09-13T00:00:40.159041Z"}, {"uuid": "50138704-bd82-4f99-a27e-d9c1068a1677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/02ctUQycjNjFPqLwmLBIrjRFFWTqwUuikF01iS0Ac-Ddxhc", "content": "", "creation_timestamp": "2026-09-13T00:00:53.384100Z"}, {"uuid": "2b8770dd-14c5-40a2-84ff-1a10bb1f8cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/4jzhXCUD_k0xBvL_XQcbeaiUzd9DtasC7IYJQY3TMwBhGcg", "content": "", "creation_timestamp": "2026-09-13T05:00:04.851833Z"}, {"uuid": "e0cb0aa0-3fd2-45e3-b823-c3de47443877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/tgmXU0irkDoDyfYynmddnQf65KnYRF1o4pU9Fy7BGisiYRg", "content": "", "creation_timestamp": "2026-09-13T19:00:06.695211Z"}, {"uuid": "db9e2e94-060e-4bdf-9303-f4518c87daba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvgfojgrws2d", "content": "Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77\n\nI. \u6982\u8981\nMetabase\u306f\u30012026\u5e748\u67086\u65e5\uff08\u65e5\u672c\u6642\u9593\uff09\u3001\u540c\u793e\u88fd\u54c1\u3067\u3042\u308bMetabase\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u672c\u8106\u5f31\u6027\u306b\u306fCVE-2026-72898\u304c\u63a1\u756a\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u672c\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u305f\u5834\u5408\u3001\u9060\u9694\u306e\u7b2c\u4e09\u8005\u304c\u8a8d\u8a3c\u306a\u3057\u3067\u7d30\u5de5\u3057\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001Metabase\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u5bfe\u3057\u3066\u4e0d\u6b63\u306aSQL\u30af\u30a8\u30ea\u3092\u5b9f\u884c\u3057\u3001Metabase\u306e\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nMetabase\u306b\u3088\u308b\u3068\u3001\u672c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u30bc\u30ed\u30c7...", "creation_timestamp": "2026-09-13T20:10:39.328054Z"}, {"uuid": "65a3b7b3-3b50-4ce2-adf9-a7fba830317f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/tgmXU0irkDoDyfYynmddnQf65KnYRF1o4pU9Fy7BGisiYRg", "content": "", "creation_timestamp": "2026-09-14T00:00:11.560772Z"}, {"uuid": "fb83fc41-01d6-4241-b77a-cf23a151b550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/4SQT6caxgqeQ8y_jF1m7RKm2uCw82flZMT2hnSyDC1hE_V8", "content": "", "creation_timestamp": "2026-09-13T22:00:08.080326Z"}, {"uuid": "57905e0e-89bc-40e6-86a9-20853a0d1ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/4SQT6caxgqeQ8y_jF1m7RKm2uCw82flZMT2hnSyDC1hE_V8", "content": "", "creation_timestamp": "2026-09-14T00:00:09.535255Z"}, {"uuid": "1d61c05c-56cf-4422-abf6-7d1d952166e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/wBXPDx1UQ-Ab7u42urAXdxtN0KbsZJHH-dGmUfiKf8tOYzk", "content": "", "creation_timestamp": "2026-09-14T00:00:13.089416Z"}, {"uuid": "c109134a-4f32-43fb-8916-41f4baebc9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/4jzhXCUD_k0xBvL_XQcbeaiUzd9DtasC7IYJQY3TMwBhGcg", "content": "", "creation_timestamp": "2026-09-14T00:00:30.264218Z"}, {"uuid": "08fb8b11-fb72-45f7-a540-4867bb6e6803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/p8-kXksj9aj27IF9tQnK5T3MSB09wILexQwnvhUaQObzQyI", "content": "", "creation_timestamp": "2026-09-14T04:00:04.214993Z"}, {"uuid": "f1d359ac-4634-4a09-833e-d54b280debc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:15:11.252801Z"}, {"uuid": "c334c694-233f-4483-af54-87d0376fc919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102280", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 34zY\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 09:59:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T13:00:04.846524Z"}, {"uuid": "ebe6c5ac-a870-4d8c-b190-edf144017af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "Telegram/rpCqbs_0Nx8ovBesF0UWb1fPPXa9FqvyBHORI8BPEy7QCgU", "content": "", "creation_timestamp": "2026-09-14T15:00:04.756719Z"}, {"uuid": "a8f4831d-2622-4bab-b2a9-a2f5b2f18a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117270437777589439", "content": "\ud83d\udcf0 Mathspace Breach Affects 1M Users via Metabase Flaw\nEducation platform Mathspace discloses a data breach affecting over 1 million users. Attackers exploited a known SQL injection flaw (CVE-2026-72898) in a self-hosted Metabase instance to access user PII. #DataBreach #CyberSecurity #EdTech #Metabase\n\ud83d\udd17 https://cyber.netsecops.io/articles/mathspace-education-platform-breached-via-metabase-vulnerability/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-14T16:54:34.817093Z"}, {"uuid": "19de7bb9-fc9e-440d-a739-04c248ed415f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvil7jc6mv2u", "content": "Education platform Mathspace discloses a data breach affecting over 1 million users. Attackers exploited a known SQL injection flaw (CVE-2026-72898) in a self-hosted Metabase instance to access user PII. #DataBreach #CyberSecurity #EdTech #Metabase\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-14T16:54:53.904170Z"}, {"uuid": "f52e8d73-56fe-4851-a944-271d48d9cf39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "Telegram/AzlsFRo6Tl1n3imLPZtyAHkupbdSlPNL_0n4o1P6eTgLExQ", "content": "", "creation_timestamp": "2026-09-14T20:00:05.952521Z"}, {"uuid": "2448087a-e299-4b55-b9bc-0421c17df5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/tzWrUfB7_Ziq0AvEd6-HE2Kmk2xPop9Q50OegD8nxPY2TPY", "content": "", "creation_timestamp": "2026-09-14T22:00:04.901017Z"}, {"uuid": "2154992e-64e4-4578-93d8-dbf08e27a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/x38-sxvf4qgSSEOQO0rIsdAof5ij13oL7xnEFNSRLy91YY4", "content": "", "creation_timestamp": "2026-09-14T23:00:03.730290Z"}, {"uuid": "8bf36217-1c26-4f63-8a80-9dc2770c6595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/tzWrUfB7_Ziq0AvEd6-HE2Kmk2xPop9Q50OegD8nxPY2TPY", "content": "", "creation_timestamp": "2026-09-15T00:00:09.463719Z"}, {"uuid": "fb79c0a4-5af2-4410-87a3-f64b67f19d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "Telegram/rpCqbs_0Nx8ovBesF0UWb1fPPXa9FqvyBHORI8BPEy7QCgU", "content": "", "creation_timestamp": "2026-09-15T00:00:20.789606Z"}, {"uuid": "236a3044-6a17-479e-b7de-bb2801b27460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/x38-sxvf4qgSSEOQO0rIsdAof5ij13oL7xnEFNSRLy91YY4", "content": "", "creation_timestamp": "2026-09-15T00:00:09.563208Z"}, {"uuid": "5b25d7e4-0a98-4a7f-bb55-2c81db3ee71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "Telegram/AzlsFRo6Tl1n3imLPZtyAHkupbdSlPNL_0n4o1P6eTgLExQ", "content": "", "creation_timestamp": "2026-09-15T00:00:10.347946Z"}, {"uuid": "a9e981fe-6de2-473e-8163-7e29a4462cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102280", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 34zY\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 09:59:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:21.803470Z"}, {"uuid": "484a7ee3-804f-4eed-ae3f-2ffd40c08df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/p8-kXksj9aj27IF9tQnK5T3MSB09wILexQwnvhUaQObzQyI", "content": "", "creation_timestamp": "2026-09-15T00:00:30.392827Z"}, {"uuid": "30b1e2a3-d1c4-4ff0-b7a8-af058faec32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/n5zziDwOW7ulPDJdcR3LPFcta0n0HVs4LGAZdLLAjQ6NEU8", "content": "", "creation_timestamp": "2026-09-15T07:00:05.588572Z"}, {"uuid": "eab987c7-71db-41b4-a753-65bdc86db50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:11.612954Z"}, {"uuid": "73cfe296-b357-4903-b891-707992645fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/xGnR1GX7RQKjZdFD5YfI-YF-dyaxpV7ZLOm68utQykEj4ho", "content": "", "creation_timestamp": "2026-09-15T14:00:05.920742Z"}, {"uuid": "61045fad-f183-4440-9720-ce67303d83b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/c99e7dL3CUnKAqF8Ab5tDrs4UJFRWK2d-jGx8wuSTjlMeDk", "content": "", "creation_timestamp": "2026-09-15T17:00:04.589387Z"}, {"uuid": "75ba557a-3449-47ef-997d-77746fb3818f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/oUZT9MhdXv68DuucuY1cnMIR5H9NJ_aoXda25MTXCeG4_mc", "content": "", "creation_timestamp": "2026-09-15T23:00:06.118519Z"}, {"uuid": "35ccc118-fa9b-47a1-b815-4d89a3427813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/c99e7dL3CUnKAqF8Ab5tDrs4UJFRWK2d-jGx8wuSTjlMeDk", "content": "", "creation_timestamp": "2026-09-16T00:00:13.434329Z"}, {"uuid": "1c31adf6-5f16-4f23-a878-3d25dbb42382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/oUZT9MhdXv68DuucuY1cnMIR5H9NJ_aoXda25MTXCeG4_mc", "content": "", "creation_timestamp": "2026-09-16T00:00:10.331168Z"}, {"uuid": "c291305b-404d-4b5c-b7cb-10d4018b6b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/xGnR1GX7RQKjZdFD5YfI-YF-dyaxpV7ZLOm68utQykEj4ho", "content": "", "creation_timestamp": "2026-09-16T00:00:30.750670Z"}, {"uuid": "6834e2f0-d04e-40af-a27b-7cd6bec3f09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/n5zziDwOW7ulPDJdcR3LPFcta0n0HVs4LGAZdLLAjQ6NEU8", "content": "", "creation_timestamp": "2026-09-16T00:00:32.467585Z"}, {"uuid": "1eab9129-423c-4c10-a803-c5ce275e1def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/XY417-TzcROzUn2FMl4djnxjgk-VpZjAWEzGwnVLEyuFuL4", "content": "", "creation_timestamp": "2026-09-16T10:00:05.690194Z"}, {"uuid": "520edf48-db2a-4b4f-b940-72ec62498ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/8rzHg3RaPCyoUmBeVP6OjQvvTmMgPYCccdam3LkzrS3vTk4", "content": "", "creation_timestamp": "2026-09-16T10:00:05.625745Z"}, {"uuid": "cf2043c0-8213-4cd4-9730-a9c28237c340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/8rzHg3RaPCyoUmBeVP6OjQvvTmMgPYCccdam3LkzrS3vTk4", "content": "", "creation_timestamp": "2026-09-17T01:00:04.891902Z"}, {"uuid": "e7870fee-db90-4a3e-8e78-7604d850174e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/XY417-TzcROzUn2FMl4djnxjgk-VpZjAWEzGwnVLEyuFuL4", "content": "", "creation_timestamp": "2026-09-17T01:00:05.040673Z"}]}