Skip to content
OpenAdvisories

Archive

10 August 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-72898 Exploited Public exploit Scanner template EPSS 98%

    Metabase SQL injection via password reset endpoint

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

    KEV Aug 11, 2026