POC github.com/0xBlackash Aug 13, 2026 by 0xBlackash

CVE-2026-72898: Metabase Unauthenticated SQL Injection via Password-Reset Endpoint Enables Full Admin Takeover (CVSS 10.0)

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full article requires sign-in

Access weekly reports, audio discussions, threat analysis, and CVE breakdowns.

Related CVEs

CVE-2026-72898

More Coverage

wiz.io Metabase SQL Injection CVE-2026-72898: Reverse Engineering and Active Exploitation Analysis

Aug 10, 2026