News

Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

  • Pierluigi Paganini--Securityaffairs.com
  • published date: 2026-08-08 11:50:21 UTC

Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor wants to write: attackers found and used an unpatched, maximum-s…

Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data Metabase just confirmed something no analytics vendor wants to write: attackers found and used an unpatched, maximum… [+4645 chars]