Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...
Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...