TGViewer
πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News @cibsecurity Β· 28.6K subscribers
Post #90270 66
πŸ–‹οΈ Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication πŸ–‹οΈ

Metabase has warned that a maximumseverity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zeroday. The vulnerability CVSS score 10.0, which does not carry a CVE identifier, allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, enabling them to gain.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
More from @cibsecurity
  1. Oct 13, 2026🦿 Google Adds Android Enterprise AI Controls: What IT Teams Can Manage 🦿 Google has anno…
  2. Oct 13, 2026πŸ•΅οΈβ€β™‚οΈ Prominent Ransomware Negotiator Faces Extortion Charges πŸ•΅οΈβ€β™‚οΈ Edward Dubrovsky, a…
  3. Oct 13, 2026πŸ•΅οΈβ€β™‚οΈ Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack πŸ•΅οΈβ€β™‚οΈ Attackers a…
  4. Oct 12, 2026πŸ•΅οΈβ€β™‚οΈ No Identity, No Recovery: Cyber Resilience Starts With IAM πŸ•΅οΈβ€β™‚οΈ The proliferation…
  5. Oct 12, 2026πŸ–‹οΈ ⚑ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware…
  6. Oct 12, 2026🌊 9 Best CSPM Tools 2026: What Posture Scores Miss 🌊 IBMs 2026 breach study, published J…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook β†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 β†’