Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:13:12 +0000 certfr-2026-avi-1075 — De multiples vulnérabilités ont été découvertes dans Metabase. Elles permettent à un attaquant de provoquer une atteint… https://cve.radiocsirt.org/vuln/certfr-2026-avi-1075 certfr-2026-avi-1075 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1075 EUVD-2026-350902 https://cve.radiocsirt.org/vuln/euvd-2026-350902 EUVD-2026-350902 https://cve.radiocsirt.org/vuln/euvd-2026-350902 fkie_cve-2026-72899 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72899 <p>Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.</p> <p>Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72899 VA-26-222-01 — Metabase SQL injection https://cve.radiocsirt.org/vuln/va-26-222-01 <p>Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the &#39;/reset_password&#39; database endpoint and gain administrator access to the connected Metabase instance. Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.</p> <p>Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the &#39;/reset_password&#39; database endpoint and gain administrator access to the connected Metabase instance. Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.</p> https://cve.radiocsirt.org/vuln/va-26-222-01 WID-SEC-W-2026-2738 — Metabase: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2738 <p>Ein Angreifer kann mehrere Schwachstellen in Metabase ausnutzen, um eine SQL-Injection durchzuführen, wodurch er Administratorrechte erhält, oder um vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Metabase ausnutzen, um eine SQL-Injection durchzuführen, wodurch er Administratorrechte erhält, oder um vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2738