πNew WriteupβοΈ
βββββββββββββββ
πDate: Sun, 13 Aug 2023 11:59:34 GMT
βββββββββββββββ
βοΈTitle: CVE-2023β38646βββMetabase Pre-Auth RCE
βββββββββββββββ
πLink: https://medium.com/p/866220684396
βββββββββββββββ
Tags: #cve_2023_38646 #metabase #poc #bug_bounty #rce
βββββββββββββββ
πDate: Sun, 13 Aug 2023 11:59:34 GMT
βββββββββββββββ
βοΈTitle: CVE-2023β38646βββMetabase Pre-Auth RCE
βββββββββββββββ
πLink: https://medium.com/p/866220684396
βββββββββββββββ
Tags: #cve_2023_38646 #metabase #poc #bug_bounty #rce
Medium
CVE-2023β38646βββMetabase Pre-Auth RCE
Summary
πNew WriteupβοΈ
βββββββββββββββ
πDate: Sat, 28 Oct 2023 18:35:28 GMT
βββββββββββββββ
βοΈTitle: Metabase [RCE] | HackTheBox: Analytics Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/e7ff79f641f6
βββββββββββββββ
Tags: #hack_the_box_writeup #analytics #ctf #metabase #rce
βββββββββββββββ
πDate: Sat, 28 Oct 2023 18:35:28 GMT
βββββββββββββββ
βοΈTitle: Metabase [RCE] | HackTheBox: Analytics Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/e7ff79f641f6
βββββββββββββββ
Tags: #hack_the_box_writeup #analytics #ctf #metabase #rce
Medium
Metabase [RCE] | HackTheBox: Analytics Walkthrough
Hello everybody! Welcome to this write-up on the HTB machine Analytics. This machine is considered quite approachable, featuring theβ¦
β€· Title: Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jul 2026 14:03:56 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_59826 #CVE_2026_59827 #Deserialization #H2 Database #Metabase #rce #Remote Code Execution
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jul 2026 14:03:56 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_59826 #CVE_2026_59827 #Deserialization #H2 Database #Metabase #rce #Remote Code Execution
Daily CyberSecurity
Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws
TL;DR Metabase has patched three critical flaws in its H2 database handling. Two carry CVE IDs and enable Metabase remote code execution. CVE-2026-59827 scores 9.9 on CVSS, and CVE-2026-59826 scorβ¦
β€· Title: Metabase SQL Injection Zero-Day (CVSS 10) Exploited
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Aug 2026 07:59:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Business Intelligence #exploited in the wild #Metabase #sql injection #Unauthenticated Attack #zero_day
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Aug 2026 07:59:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Business Intelligence #exploited in the wild #Metabase #sql injection #Unauthenticated Attack #zero_day
Daily CyberSecurity
Metabase SQL Injection Zero-Day (CVSS 10) Exploited
TL;DR Metabase disclosed a critical SQL injection zero-day rated CVSS 10. An unauthenticated remote attacker can gain full administrator access to an instance. Metabase confirms active exploitatioβ¦
β€· Title: How I Took Over a Metabase Admin Panel
ββββββββββββββββββββββββ
πͺ Author: samael0x4
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 13 Aug 2026 17:19:41 GMT
ββββββββββββββββββββββββ
β Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
ββββββββββββββββββββββββ
πͺ Author: samael0x4
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 13 Aug 2026 17:19:41 GMT
ββββββββββββββββββββββββ
β Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
Medium
How I Took Over a Metabase Admin Panel π₯·
One HTTP request. Zero credentials. Full administrator access.
β€· Title: Trezor Data Breach: 13,689 Customers Exposed via Critical Metabase Zero-Day CVE-2026-72898
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 15 Aug 2026 03:21:18 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #CVE_2026_72898 #data breach #Metabase #ShinyHunters #ShipMonk #Trezor #zero_day
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 15 Aug 2026 03:21:18 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #CVE_2026_72898 #data breach #Metabase #ShinyHunters #ShipMonk #Trezor #zero_day
Information Security News
Trezor Data Breach: 13,689 Customers Exposed via Critical Metabase Zero-Day CVE-2026-72898
The personal data of nearly 14,000 Trezor hardware wallet customers was stolen by exploiting a critical zero-day vulnerability in Metabase, the business intelligence platform used by Trezorββ¦
β€· Title: Weekly Threat Intelligence Report: Mid-August 2026
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 17 Aug 2026 02:01:17 +0000
ββββββββββββββββββββββββ
β Tags: #Weekly Recap #CISA KEV #Cisco ASA #Metabase #threat intelligence #VMware vCenter #vulnerability management #Windows WinSock #Zero_Day Exploits
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 17 Aug 2026 02:01:17 +0000
ββββββββββββββββββββββββ
β Tags: #Weekly Recap #CISA KEV #Cisco ASA #Metabase #threat intelligence #VMware vCenter #vulnerability management #Windows WinSock #Zero_Day Exploits
Daily CyberSecurity
Weekly Threat Intelligence Report: Mid-August 2026
Welcome to the latest CVE WATCHTOWER briefing. Our team compiled this weekly threat intelligence report to highlight active cyber risks. Between August 10 and August 16, 2026, security researchersβ¦