Metabase

Reported Context (4)

The only product it names as a target is Metabase, a BI tool with a known flaw that attackers have exploited. Metabase has urged users to upgrade to at least the minimum safe releases in a list last updated August 14. JPCERT/CC Warns of Rising Web Data Leaks in Japan Linked to API Abuse and Metabase Attacks
In August, Insikt Group created Nuclei templates to detect CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). Recorded Future Identifies 73 High-Impact Vulnerabilities in August, 70 Actively Exploited
Breach of ShipMonk systems; root cause traced to a Metabase flaw Trezor Says ShipMonk Breach Exposed Data of About 80,000 Customers
On August 6th, 2026, Metabase disclosed a security incident. Researchers Trace Metabase SQL Injection to Unchecked User-ID in Password-Reset Requests

CVE (72)

Malware (4)

Threat Actors (1)

MITRE ATT&CK (1)

Vendors (26)

Products (20)

Tools (8)

Industries (1)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.