{"vulnerability": "CVE-2026-72898", "sightings": [{"uuid": "30845d63-fd68-4d1c-8bba-c7dc7468c7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mszeuz26su2f", "content": "\u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77\n\nMetabase\u306b\u304a\u3044\u3066CVE-2026-72898\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u7d30\u5de5\u3055\u308c\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u65e2\u306b\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u6982\u5ff5\u5b9f\u8a3c\u30b3\u30fc\u30c9\u3082\u6d41\u51fa\u3057\u3066\u3044\u308b\u305f\u3081\u3001Metabase 63\u7cfb\u4ee5\u524d\u306e\u30e6\u30fc\u30b6\u30fc\u306f\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #\u60c5\u5831\u6f0f\u6d29 #CVE", "creation_timestamp": "2026-08-14T05:01:19.773544Z"}, {"uuid": "d4cd8f1b-f1be-4b7f-ab10-68af32d0a347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mszey73md7b2", "content": "\u3010JPCERT\u3011\u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260023.html\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "creation_timestamp": "2026-08-14T05:03:11.183071Z"}, {"uuid": "b30517f1-e759-4449-8f53-4abe84cec289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mszptoqd3n2g", "content": "\ud83d\udea8 A perfect 10.0 CVSS score. That's not a typo.\n\nCVE-2026-72898.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-14T08:17:25.142960Z"}, {"uuid": "d3663dab-74d3-4be0-b4c1-00ba3158c222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mszuhnltqy2c", "content": "\uff1e \u6ce8\u610f\u559a\u8d77: Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260023.html\n", "creation_timestamp": "2026-08-14T09:40:10.264696Z"}, {"uuid": "83c51195-8846-4c5d-ab33-a946e5af2403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117107074861858582", "content": "We are also scanning & reporting Metabase IPs likely unpatched to CVE-2026-72898 SQLi, which is exploited in the wild & on CISA KEV. 2171 unpatched (version check) instances seen 2026-08-15.  Top US (603), Germany (278)\nDashboard World Map stats:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-72898%2B&data_set=count&scale=log&auto_update=on\nIP Data in our Vulnerable HTTP reporting tagged 'cve-2026-72898' : https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ (since 2026-08-11)\nNVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-72898\nMetabase advisory & patch info: https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf", "creation_timestamp": "2026-08-16T20:29:14.794428Z"}, {"uuid": "e74132db-6b38-4721-8cae-3ce9af5d9bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mta3wc7ys22g", "content": "Metabase\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-72898\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  #JPCERTCC (Aug 14)\n\nwww.jpcert.or.jp/at/2026/at26...", "creation_timestamp": "2026-08-16T21:09:36.027932Z"}, {"uuid": "257a89ad-e4bf-4974-95ce-83a2acfb1030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuozcdc6y2a", "content": "\ud83d\udea8 CVSS 10.0 doesn't mean 'patch soon.' It means 'drop everything and patch now.'\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-12T08:19:21.971084Z"}, {"uuid": "495530da-815d-48c6-a7a8-4f00dd758f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msv2jy2crg22", "content": "\ud83d\udea8 CRITICAL THREAT: CISA adds CVE-2026-72898 (Metabase SQL Injection) to the KEV catalog due to active exploitation. Unauthenticated attackers can hijack admin rights and steal database credentials. Full TSUITE brief with SPL, KQL, AQL & YARA-L: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T11:45:32.323491Z"}, {"uuid": "a5353a00-b574-4bb4-abdf-a68eae39e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/bishopfox.bsky.social/post/3msv7wrfi4o2f", "content": "\ud83d\udea8 Critical Metabase SQL injection (CVE-2026-72898)\n\nCVSS 10.0.\n\nNo authentication required.\n\nActively exploited in the wild.", "creation_timestamp": "2026-08-12T13:22:10.641022Z"}, {"uuid": "6eefde50-73ee-465c-9347-b43df885f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msva5igoc62f", "content": "Metabase Hit by a Critical Zero-Day: CVE-2026-72898 Puts Business Intelligence Data at\u00a0Risk\n\nIntroduction: When the Analytics Layer Becomes the Attack Path Metabase is often treated as the quiet engine behind dashboards, reports, business intelligence, and data-driven decision-making. It may not be\u2026", "creation_timestamp": "2026-08-12T13:25:55.866984Z"}, {"uuid": "5081d2ba-cc4b-416e-969e-5f8a1f1cba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzkymkk22", "content": "CVE-2026-72898 is trending. Hype score 9, currently #4 on cvemon.\n\nMetabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72898", "creation_timestamp": "2026-08-12T18:10:04.506044Z"}, {"uuid": "3185f588-7974-453d-89f3-a8e9ed7fad00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/veltiosihello.bsky.social/post/3mswawt5x5m2j", "content": "The Metabase zero-day (CVE-2026-72898, CVSS 10) isn't your classic app bug. It grants direct SQL access to the underlying database. Credentials and API keys go exposed. We've patched dozens of these without a single incident.\n\nhttps://s.veltiosisolutions.com/AmOFk", "creation_timestamp": "2026-08-12T23:12:45.291387Z"}, {"uuid": "c5b920ec-382f-44c1-9bbe-bd7b24f8537b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswkomeo6e2y", "content": "\ud83d\udccc CVE-2026-72898 - Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access t... https://www.cyberhub.blog/cves/CVE-2026-72898", "creation_timestamp": "2026-08-13T02:07:07.513839Z"}, {"uuid": "cb625cc9-3e53-43e5-ba6d-363bc8e06043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/TuD_wnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY", "content": "", "creation_timestamp": "2026-08-17T18:00:07.189686Z"}, {"uuid": "2c4ff801-d4f9-4bcb-8fbd-e486fdb98267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-17T18:00:04.951468Z"}, {"uuid": "2708ff97-018c-48e0-88c8-d05a2ec5e6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msx7nw3zid23", "content": "CVSS 10.0 is not a typo.\n\nMetabase.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-13T08:22:32.634826Z"}, {"uuid": "73d97ab3-4365-4d4c-9f05-3b268b71d22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-08-13T08:49:19.940908Z"}, {"uuid": "919d88c9-6a2e-4f03-bea2-37100e3c76ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt3prm4idi2b", "content": "Nearly 14,000 Trezor customers had their data stolen via CVE-2026-72898, a critical Metabase zero-day exploited through logistics partner ShipMonk.\n\n#Trezor #DataBreach #Metabase #CVE202672898 #ShipMonk", "creation_timestamp": "2026-08-15T03:21:35.562849Z"}, {"uuid": "6d66573b-b58f-4da2-a080-2738588b2be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072531713464991", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\nCVE-2026-72898 Metabase SQL injection via password reset endpoint\nCVE-2026-72899 Metabase SQL injection via public card or dashboard\nCVE-2026-72900", "creation_timestamp": "2026-08-10T18:04:27.786996Z"}, {"uuid": "95da889d-b37f-4845-ab2a-ea329ca50f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\n  * CVE-2026-72898 Metabase SQL injection via password reset endpoint\n  * CVE-2026-72899 Metabase SQL injection via public card or dashboard\n  * CVE-2026-72900\n\n", "creation_timestamp": "2026-08-10T18:04:38.372887Z"}, {"uuid": "2f499ed1-e1c2-4e7b-85ca-f60db5970aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2ggpjbkjd3mt", "content": "CVE-2026-72898 - Metabase SQL injection via password reset endpoint\nCVE ID : CVE-2026-72898\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database e...", "creation_timestamp": "2026-08-10T18:56:56.616870Z"}, {"uuid": "767e1052-8fcf-471b-89c1-eacad1aeb62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqtdoplmw2o", "content": "CVE-2026-72898\nMetabase's reset password feature can be exploited by an attacker to inject malicious SQL code, potentially gaining administrator access to the connected database. This vulnerability allows an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:26:06.295479Z"}, {"uuid": "14b4e191-4932-46ef-bfbf-fbebd0c53413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mt45seq34h2k", "content": "\ud83d\udea8 CVSS 10.0. That's not a typo.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72898-metabase-sql-injection-grants-admin-access/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-15T07:32:33.306202Z"}, {"uuid": "91eb1a66-8132-4efc-bd01-89a07507d9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-15T08:00:05.642641Z"}, {"uuid": "7c6b4084-bf95-46e8-863a-677fe220a4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.762255Z"}, {"uuid": "bb5453e6-ab34-46e6-8b28-f7bb80c997a2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80ebf1f6-0e2d-47d9-8e7d-dbef120a1e0f", "content": "", "creation_timestamp": "2026-08-10T21:00:26.046615Z"}, {"uuid": "97352ce8-56ef-4736-9512-14ea900a9340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/TuD_wnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY", "content": "", "creation_timestamp": "2026-08-18T00:00:08.782727Z"}, {"uuid": "1300b03a-93b1-4fa8-97f3-2d8fc33d0b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-18T00:00:11.283854Z"}, {"uuid": "6fe37a59-1c4e-405f-ba60-7c32c3f2ae8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-22", "content": "", "creation_timestamp": "2026-08-11T08:45:05.925004Z"}, {"uuid": "f1ae06f6-2661-42b7-b669-461b0e98f4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/rwatimes.bsky.social/post/3mtnvtjz5fw2d", "content": "Crypto breaches 2026: shipping leaks fuel wrench attacks\nAug 18 2026 08:50 UTC\nThree hardware wallet and broker breaches exposed millions of shipping addresses, fueling a wave of crypto wrench attacks.\n#wrench-attacks #data-breaches #hardware-wallets #metabase-vulnerability #cve-2026-72898", "creation_timestamp": "2026-08-22T08:57:58.266047Z"}, {"uuid": "9c83d917-0347-40b2-8e5d-630d194f32b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msxkgm3jhh24", "content": "(CISA TS-SOC) CVE-2026-72898 \u2013 Metabase SQL Injection\u00a0Vulnerability\n\nSeverity: CRITICAL Impact Summary: Allows unauthenticated attackers to gain administrator access, modify configuration, steal credentials, and exfiltrate data from connected databases via SQL\u2026\n\nhttps://thecybermind.co/join", "creation_timestamp": "2026-08-13T11:35:18.477640Z"}, {"uuid": "14062b55-004e-4fcb-9eb6-724e9870a7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "", "creation_timestamp": "2026-08-11T12:15:03.622545Z"}, {"uuid": "a81831ff-2161-4673-a9e2-03454ae41541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mt5bbi7qcc24", "content": "Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS 10.0, Wide Blast Radius", "creation_timestamp": "2026-08-15T18:07:58.377991Z"}, {"uuid": "54d6bff0-e908-4264-9822-99d6995af5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.479364Z"}, {"uuid": "8ca8d508-851d-4698-9d1c-d0d501bd645b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4cee6c5-5cc3-4ef7-bfc1-d8f189329f23", "content": "", "creation_timestamp": "2026-08-11T20:00:02.617632Z"}, {"uuid": "e9a53c3e-7d9b-43cf-9b3e-bfa150179b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mstgkbgaqq2i", "content": "\ud83d\uded1 CVE-2026-72898\nMetabase Metabase\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset\u2026\nhttps://cvesentinel.com/report/CVE-2026-72898?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-11T20:15:07.702605Z"}, {"uuid": "7b91ba46-ccaf-488f-a23a-d1a99de73bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mstgohp7m52v", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities (Cisco ASA/FTD, Windows WinSock, Metabase) to the KEV Catalog.\n-\nIOCs: CVE-2026-20349, CVE-2026-68820, CVE-2026-72898\n-\n#CISA #CVE #ThreatIntel", "creation_timestamp": "2026-08-11T20:17:28.207812Z"}, {"uuid": "8fa14bd0-8fe3-42a4-94f9-5e46c22e90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-16T00:00:45.967541Z"}, {"uuid": "a0ac97a3-95fd-4ec5-a531-f0d9d0e90e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mstmts2uu524", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72898: Metabase SQL Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72898", "creation_timestamp": "2026-08-11T22:07:49.530642Z"}, {"uuid": "9cb50cab-a888-49e9-b04b-e515e22a7eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 21:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 - Metabase\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T23:00:03.352598Z"}, {"uuid": "f88674a0-7a9e-4ed5-a0af-9212a608009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-11T23:00:03.518091Z"}, {"uuid": "00c91996-fcb7-4ef5-9090-3603dd9b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-11T23:00:03.570762Z"}, {"uuid": "ba7da91c-e4eb-4ff7-bee5-fc13680d1bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 21:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 - Metabase\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T00:00:07.637820Z"}, {"uuid": "77df193e-eee3-4c32-8733-6a1f94a06a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/406", "content": "proof: python poc-CVE-2026-72898.py --host https://bi.wirx.io", "creation_timestamp": "2026-08-12T00:00:06.759738Z"}, {"uuid": "f3f8fc5b-8316-4210-a531-752748b9be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/405", "content": "Metabase unauthenticated SQL injection -> admin session forgery", "creation_timestamp": "2026-08-12T00:00:06.840852Z"}, {"uuid": "f7d7a7ed-82ab-4eeb-8666-43e571e9027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-metabase-1", "content": "Aggiornamenti di sicurezza sanano 2 vulnerabilit\u00e0 con gravit\u00e0 \u201ccritica\u201d in Metabase, piattaforma open source di Business Intelligence (BI). Tra queste si evidenzia la CVE-2026-72898, che risulta sfruttata attivamente in rete.", "creation_timestamp": "2026-08-12T01:00:34.137527Z"}, {"uuid": "9c32c9a6-b6ca-4a97-bd87-3f956b7e4c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.859437Z"}, {"uuid": "f94a9b27-7dcf-4644-9d20-53bff44c7a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117140433676918715", "content": "\ud83d\udea8\ud83c\uddeb\ud83c\uddf7 iMapper allegedly breached through critical Metabase vulnerability, account data and database access leaked on a cybercrime forum\u2800A forum actor claims to have compromised iMapper, a French web-connected 2D laser measurement platform for building professionals, using a vulnerability identified in the listing as CVE-2026-72898 with a claimed CVSS score of 10.0.\u2800The exposed account dataset reportedly contains 2,463 records and includes:\u2800\u2022 User IDs and usernames\u2022 Password hashes\u2022 Account roles\u2022 Email addresses\u2022 Phone numbers\u2022 Professions\u2022 MFA status and related metadata\u2022 Language preferences\u2022 Stripe customer IDs\u2022 Stripe tax-related identifiers\u2022 Measurement and display configuration fields\u2800The data is being distributed in XLSX format. The listing also claims the compromised environment contains additional database tables and offers credentials that could provide access to those systems.\u2800The claims, exploitation method and authenticity, availability and scope of the allegedly exposed data and database access have not been independently verified.\u2800\ud83d\udca5 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing", "creation_timestamp": "2026-08-22T17:52:49.042082Z"}, {"uuid": "e95ee15e-45b0-459b-9418-5e2aa7767b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.973124Z"}, {"uuid": "090d64a6-2878-451b-8e62-ba8f887275d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.048517Z"}, {"uuid": "e5d7f865-91e0-4db0-9928-7c6d7a7bd8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98444", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-safe-detection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Franc-Zar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 09:42:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.514003Z"}, {"uuid": "c145865f-71bd-41d2-a183-b5338cb6e05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtwh4wgk5z24", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\n\n", "creation_timestamp": "2026-08-25T18:28:44.420011Z"}, {"uuid": "df1a9dfe-4956-4c25-87c4-55aa2b0503de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72898", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtwhauzptu25", "content": "CVE-2026-72898: Critical Metabase SQL Injection Is Being Actively Exploited, Allowing Unauthenticated Admin\u00a0Takeover\n\nCVE-2026-72898 is a critical Metabase SQL injection flaw actively exploited in the wild. Learn affected\u2026\n\nhttps://thecybersecguru.com/exploits/cve-2026-72898-metabase-sql-injection/", "creation_timestamp": "2026-08-25T18:30:57.544982Z"}, {"uuid": "b98a6c64-3c42-4f73-9cdb-24fe720cf240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.120083Z"}, {"uuid": "9aabcc0a-220b-4723-bb5a-ceb19dbde120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/information_security_channel/55797", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\nhttps://www.offsec.com/blog/cve-2026-72898-2/\n\nCVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it. \nThe post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability (https://www.offsec.com/blog/cve-2026-72898-2/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-08-25T20:00:04.085410Z"}, {"uuid": "8c1a7ed9-b56a-447b-9e8c-6946fe125704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98444", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-safe-detection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Franc-Zar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 09:42:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.187451Z"}, {"uuid": "d31187e4-c133-4b85-ba09-82453181e6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.420926Z"}, {"uuid": "4cad15da-4e78-461b-bffa-fb4007a1ed5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.494766Z"}, {"uuid": "7870f6a7-479b-4a0b-becf-0c595da46944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.733452Z"}, {"uuid": "29017148-c03a-4dda-832c-2036e7adf790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/jw3wLgXyVg6x4Mx6yR86O-CQYtg0OBJAqHiZTCrWMBQGt0U", "content": "", "creation_timestamp": "2026-08-26T20:00:04.016382Z"}, {"uuid": "ccf81cf6-b8bd-4f61-887f-9a5e83d84d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.922909Z"}, {"uuid": "29c10ae7-82e3-438b-9518-59b933f20d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:58.484158Z"}, {"uuid": "53f98ee7-42d3-446a-ad1c-b4a0a08e11c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/55797", "content": "CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability\nhttps://www.offsec.com/blog/cve-2026-72898-2/\n\nCVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it. \nThe post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability (https://www.offsec.com/blog/cve-2026-72898-2/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-08-26T00:00:08.474904Z"}, {"uuid": "f07e668a-9416-49cb-b57c-eed5e993139a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99841", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-metabase-sqli\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d-maggipinto\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 18:37:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T23:00:04.240443Z"}, {"uuid": "a6648326-e78f-4d63-a4db-67b3b82bb066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99841", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898-metabase-sqli\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d-maggipinto\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 18:37:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:07.815969Z"}, {"uuid": "e42b5ce7-15da-4e09-9a01-3c51a41844ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/jw3wLgXyVg6x4Mx6yR86O-CQYtg0OBJAqHiZTCrWMBQGt0U", "content": "", "creation_timestamp": "2026-08-27T00:00:08.278280Z"}, {"uuid": "ef8f08ee-754a-4a81-9491-98c7a591c442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/504", "content": "poc: https://github.com/EQSTLab/CVE-2026-72898", "creation_timestamp": "2026-08-29T00:00:07.151810Z"}, {"uuid": "bfdf0c76-ee23-4685-897e-52e84716f559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/captainsmok3r_official/503", "content": "CVE-2026-72898 Metabase password-reset unauthenticated SQL injection", "creation_timestamp": "2026-08-29T00:00:07.181900Z"}, {"uuid": "5de7c772-b31c-4313-8feb-04bd4c931e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a VuxNx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 11:59:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-72898\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.667471Z"}, {"uuid": "321a7d7a-0348-493e-8eab-5ddaf1a32930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98148", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 09:26:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.000843Z"}, {"uuid": "684f6d4d-ff6d-4bd7-a772-6f91029af198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mttbs4dbmu2r", "content": "\ud83d\udd17 CVE : CVE-2026-72898, CVE-2026-72899, CVE-2026-72900", "creation_timestamp": "2026-08-24T12:15:13.977900Z"}, {"uuid": "8d3def61-a87f-40c2-89ac-4bcee9bc7b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T10:00:03.275737Z"}]}