Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...
Replayable AI reasoning blocks let researchers recover API keys and passwords from public logs; they say the main extraction attack is now mitigated.
The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.
A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after detecting "unusual activity on ...
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...
A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.
XDA Developers on MSN
An AI found a $500k WordPress exploit in 10 hours for $25 — and that's the least worrying part
An AI uncovered a $500,000 WordPress exploit in 10 hours for $25, raising bigger concerns about how cheaply serious vulnerabilities can now be found.
The Azure SQL Database REST API provides management operations for SQL databases, elastic pools, servers, failover groups, and firewall rules. It supports database creation, scaling, backup management ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results