Tag

#Business Intelligence

2 articles tagged #Business Intelligence.

Cybersecurity/Third-Party Risk·Aug 19, 2026·5 min read

Framework and Trezor's Shipping Partner Both Got Breached Through Metabase

Two unrelated companies disclosed breaches in the same week, both tracing back to a vulnerability in Metabase, the business intelligence tool their vendors used. Here's what happened, how it lines up with the CVE we covered days earlier, and what to actually check.

CybersecurityData BreachThird-Party Risk

Read

CVE-2026-72898: Metabase's Password-Reset Endpoint Lets Anyone Become Admin

P.02

Cybersecurity/Vulnerability Management·Aug 13, 2026·5 min read

CVE-2026-72898: Metabase's Password-Reset Endpoint Lets Anyone Become Admin

An unauthenticated attacker can inject SQL through Metabase's password-reset flow and walk out with full admin access. CVSS 10.0, on CISA's KEV list since August 11. Here's what's affected and how to patch it.

CybersecurityCVESQL Injection

Read