CVE-2026-72898
CriticalKnown Exploited
2 articles mention this CVE.
- CriticalVulnerabilityVendor Advisory
注意喚起: MetabaseのSQLインジェクションの脆弱性（CVE-2026-72898）に関する注意喚起 (公開)
注意喚起: MetabaseのSQLインジェクションの脆弱性（CVE-2026-72898）に関する注意喚起 (公開)
JPCERT/CCFull article → - CriticalVulnerability
Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898
Immediate action is advised for all organizations running self-hosted Metabase. A critical, unauthenticated SQL injection vulnerability has been disclosed in Metabase's password reset functionality, and Metabase has conf
Bishop FoxFull article →