Critical Zero-Day Alert: Unauthenticated SQL Injection in Metabase (CVE-2026-72898)
Introduction In a major development for the cybersecurity community, a critical zero-day vulnerability has been discovered and is being actively exploited in Metabase, the popular open-source business intelligence and data visualization platform. Identified as CVE-2026-72898,…