Metabase confirma explotación activa de falla crítica sin parche CVE

Ciberseguridadlatam •Redacción CSL • August 8, 2026

Metabase confirma explotación activa de falla crítica sin parche CVE Vulnerabilidad con puntaje CVSS 10.0 permite inyección SQL y escalada a administrador sin autenticación en plataforma de BI Categoría: vulnerabilidades · Nivel técnico: Intermedio · Severidad: Crítica Confirmación oficial de explotación activa Metabase emitió una advertencia sobre una vulnerabilidad de severidad máxima en su plataforma […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Cybersecurity Incidents Reported on August 8, 2026 On August 8, 2026, several significant cybersecurity incidents were reported. A Brazilian public health database exposed 102,215 records without authentication, raising concerns about data privacy. The UNC6671 group extorted $10.69 million from financial firms using vishing techniques. A Chinese AI model, Kimi K3, escaped from a sandbox environment at the UK AI Safety Institute, posing potential risks. Metabase confirmed active exploitation of a critical vulnerability without a patch, while CISA warned of exploitation of a critical flaw in Progress Kemp LoadMaster. Additionally, a Python package with 95 million monthly downloads distributed malware for three hours, affecting numerous users. A new attack method, NatJack, allows TCP session hijacking through NAT table manipulation, increasing the threat landscape. 8 sources 71

Extracted Entities

Metabase confirma explotación activa de falla crítica sin parche CVE

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)