🛡️ **BLUF: Salesforce and ServiceNow Portals Breached via Metabase Zero-Day — 17-Month Exposure, Ongoing Exploitation**
Published Sunday, August 16, 2026 at 04:22 AM PT Attackers exploited a Metabase authentication bypass vulnerability to gain unauthenticated admin access to Salesforce and ServiceNow customer portals, exfiltrating sensitive data for at least 17 months before discovery. Exploitation is active in the wild. Organizations using Metabase or relying on Salesforce/ServiceNow integrations should audit access logs and update immediately. ...