CVE-2026-27464

creationtimestamp| type| source ---|---|--- 2026-02-21 08:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6q44i3n2n 2026-02-21 21:48:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mffm24k63l2n 2026-03-03 15:40:09+00:00| seen|...

CVE-2026-27464

Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, authenticated users are able to retrieve sensitive information from a Metabase instance, including database access credentials. During testing, it was confirmed that a low-privileg...

CVE-2026-27464

Metabase (open-source data analytics platform) is affected by CVE-2026-27464 in versions prior to 0.57.13 and 0.58.x up to 0.58.6. The issue permits authenticated users to extract sensitive information, including database access credentials, via template evaluation in the Notifications endpoint, ...