Archive
10 August 2026
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Critical 10.0
Metabase SQL injection via password reset endpoint
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
KEV Aug 11, 2026