🛡️ **METABASE ZERO-DAY ACTIVELY EXPLOITED — UNAUTHENTICATED ADMIN ACCESS**
Published Saturday, August 08, 2026 at 10:15 AM PT BLUF: Metabase zero-day allowing unauthenticated remote admin access is exploited in the wild. Customer data theft confirmed. Immediate isolation and monitoring required; patch availability pending. DETAILS SQL injection vulnerability in Metabase permits remote, unauthenticated attackers to achieve full administrative access without credentials Exploitation confirmed active in production environments; customer data exfiltration campaigns underway Vulnerability grants attackers ability to read/export analytics, user accounts, connected database credentials, and underlying data accessible via Metabase queries Reported by multiple independent sources (SecurityAffairs, The Hacker News, BleepingComputer) with consistent exploitation narrative Specific affected version range, CVE identifier, and patch timeline not yet disclosed in available reporting IMPACT ...