Nundina › Discover calendars › CISA Known Exploited Vulnerabilities calendar › CVE-2026-72898 - MetabaseCVE-2026-72898 - Metabase11 August 2026Metabase SQL Injection Vulnerability. Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based...CISA Known Exploited Vulnerabilities calendarMore from this calendar

20 October 2026 - CVE-2026-110936 - Siemens Software Center

20 October 2026 - CVE-2026-96652 - Plex Media Server

20 October 2026 - CVE-2026-96654 - Plex Media Server

20 October 2026 - CVE-2026-96655 - Plex Media Server

20 October 2026 - CVE-2026-96656 - Plex Media Server