ME
Product
metabase
by metabase · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 8High 9Medium 14Low 0
Watch

Add metabase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72898
In wildKEV
10.0
99%
Aug 10
Metabase SQL injection via password reset endpoint
Affected: x.58.0 before x.58.24; x.59.0 before x.59.21; x.60.0 before x.60.17; x.61.0 before x.61.11; x.62.0 before x.62.9; x.63.0 before x.63.5
Showing 1