Metabase

2 Metabase vulnerabilities with confirmed exploitation in the wild, as published by CISA; 2 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Metabase
			Vulnerability			Status
overdue 27d2026-08-14	CVE-2026-72898	Metabase / Metabase	Metabase SQL Injection Vulnerability	2026-08-11	10.0	past due
overdue 646d2024-12-03	CVE-2021-41277	Metabase / Metabase	Metabase GeoJSON API Local File Inclusion Vulnerability	2024-11-12	7.5	past due

2 records Open in catalog with filters →