Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72898 KEV |
|
[KEV] SQL Injection in metabase (CVE-2026-72898)
SQL injection in metabase (CVE-2026-72898). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-50147 |
|
Vulnerability in metabase (CVE-2026-50147)
vulnerability in metabase (CVE-2026-50147). Confidential information can be exposed externally.
|
| CVE-2026-50148 |
|
Vulnerability in metabase (CVE-2026-50148)
vulnerability in metabase (CVE-2026-50148). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59826 |
|
Code Injection in metabase (CVE-2026-59826)
code injection in metabase (CVE-2026-59826). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59827 |
|
Unsafe Deserialization in metabase (CVE-2026-59827)
vulnerability in metabase (CVE-2026-59827). Successful exploitation can lead to full system takeover.
|
| CVE-2021-41277 KEV |
|
[KEV] Information Disclosure in metabase (CVE-2021-41277)
vulnerability in metabase (CVE-2021-41277). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|