Veille CVE

Lundi 10 août 2026

3 CVE

Critique 2 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Metabase » ✕
  1. CVE-2026-72900 6.5 Moyenne

    Metabase

    Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.

  2. CVE-2026-72899 10.0 Critique

    Metabase

    Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

  3. CVE-2026-72898 10.0 Critique Exploitée

    Metabase · Metabase metabase

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.