#7
BleepingComputer
general
August 07, 2026 at 20:14 UTC
Metabase SQLi zero-day exploited in customer data-theft attacks
By Mayank Parmar
AI Summary
A critical zero-day SQL injection vulnerability in Metabase was actively exploited in attacks against customer instances to steal data, with confirmed impact on Framework and Tally deployments. As Metabase is widely used for business intelligence dashboards with direct database connectivity, SQLi exploitation can expose sensitive organizational data at scale.
Relevance score: 80.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →