πNew WriteupβοΈ
βββββββββββββββ
πDate: Sun, 13 Aug 2023 11:59:34 GMT
βββββββββββββββ
βοΈTitle: CVE-2023β38646βββMetabase Pre-Auth RCE
βββββββββββββββ
πLink: https://medium.com/p/866220684396
βββββββββββββββ
Tags: #cve_2023_38646 #metabase #poc #bug_bounty #rce
βββββββββββββββ
πDate: Sun, 13 Aug 2023 11:59:34 GMT
βββββββββββββββ
βοΈTitle: CVE-2023β38646βββMetabase Pre-Auth RCE
βββββββββββββββ
πLink: https://medium.com/p/866220684396
βββββββββββββββ
Tags: #cve_2023_38646 #metabase #poc #bug_bounty #rce
Medium
CVE-2023β38646βββMetabase Pre-Auth RCE
Summary
πNew WriteupβοΈ
βββββββββββββββ
πDate: Sat, 28 Oct 2023 18:35:28 GMT
βββββββββββββββ
βοΈTitle: Metabase [RCE] | HackTheBox: Analytics Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/e7ff79f641f6
βββββββββββββββ
Tags: #hack_the_box_writeup #analytics #ctf #metabase #rce
βββββββββββββββ
πDate: Sat, 28 Oct 2023 18:35:28 GMT
βββββββββββββββ
βοΈTitle: Metabase [RCE] | HackTheBox: Analytics Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/e7ff79f641f6
βββββββββββββββ
Tags: #hack_the_box_writeup #analytics #ctf #metabase #rce
Medium
Metabase [RCE] | HackTheBox: Analytics Walkthrough
Hello everybody! Welcome to this write-up on the HTB machine Analytics. This machine is considered quite approachable, featuring theβ¦
β€· Title: Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jul 2026 14:03:56 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_59826 #CVE_2026_59827 #Deserialization #H2 Database #Metabase #rce #Remote Code Execution
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Jul 2026 14:03:56 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_59826 #CVE_2026_59827 #Deserialization #H2 Database #Metabase #rce #Remote Code Execution
Daily CyberSecurity
Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws
TL;DR Metabase has patched three critical flaws in its H2 database handling. Two carry CVE IDs and enable Metabase remote code execution. CVE-2026-59827 scores 9.9 on CVSS, and CVE-2026-59826 scorβ¦
β€· Title: Metabase SQL Injection Zero-Day (CVSS 10) Exploited
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Aug 2026 07:59:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Business Intelligence #exploited in the wild #Metabase #sql injection #Unauthenticated Attack #zero_day
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 08 Aug 2026 07:59:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Business Intelligence #exploited in the wild #Metabase #sql injection #Unauthenticated Attack #zero_day
Daily CyberSecurity
Metabase SQL Injection Zero-Day (CVSS 10) Exploited
TL;DR Metabase disclosed a critical SQL injection zero-day rated CVSS 10. An unauthenticated remote attacker can gain full administrator access to an instance. Metabase confirms active exploitatioβ¦
β€· Title: How I Took Over a Metabase Admin Panel
ββββββββββββββββββββββββ
πͺ Author: samael0x4
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 13 Aug 2026 17:19:41 GMT
ββββββββββββββββββββββββ
β Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
ββββββββββββββββββββββββ
πͺ Author: samael0x4
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 13 Aug 2026 17:19:41 GMT
ββββββββββββββββββββββββ
β Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
Medium
How I Took Over a Metabase Admin Panel π₯·
One HTTP request. Zero credentials. Full administrator access.
β€· Title: Trezor Data Breach: 13,689 Customers Exposed via Critical Metabase Zero-Day CVE-2026-72898
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 15 Aug 2026 03:21:18 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #CVE_2026_72898 #data breach #Metabase #ShinyHunters #ShipMonk #Trezor #zero_day
ββββββββββββββββββββββββ
πͺ Author: Nam Phong
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 15 Aug 2026 03:21:18 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #CVE_2026_72898 #data breach #Metabase #ShinyHunters #ShipMonk #Trezor #zero_day
Information Security News
Trezor Data Breach: 13,689 Customers Exposed via Critical Metabase Zero-Day CVE-2026-72898
The personal data of nearly 14,000 Trezor hardware wallet customers was stolen by exploiting a critical zero-day vulnerability in Metabase, the business intelligence platform used by Trezorββ¦