BLACKOUT MAP

Metabase: exploited vulnerabilities

AddedVulnerabilityProductSeverityAttack chance
Aug 11, 2026SQL InjectionCVE-2026-72898MetabaseCritical 10.099%
Nov 12, 2024GeoJSON API Local File InclusionCVE-2021-41277MetabaseCritical 10.097%

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.