metabase-cve-2026-72898

CVE-2026-72898: Metabase unauthenticated SQL injection Independent reconstruction, lab validation, and proof-of-concept for the Metabase password-reset SQL injection CVE-2026-72898, a CVSS 10.0, unauthenticated vulnerability exploited in the wild and added to CISA's Known Exploited Vulnerabilitie...

Exploit for SQL Injection in Metabase

MetaPwn Mass CVE-2026-72898 — Metabase Mass Exploitation &...

CVE-2026-126777

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

CVE-2026-126777 Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

EUVD-2026-123771

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

CVE-2026-126777 Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

CVE-2026-126777

Traccar version 3.15 before 6.17.0 is vulnerable to an authentication bypass in the LdapProvider.login() function. The root cause is a failure to reject empty passwords when LDAP authentication is enabled, allowing the system to perform unauthenticated binds against directories that permit them. ...

CVE-2026-126777

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

CVE-2026-126777: Traccar: Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login() that fails to reject…

Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...

PT-2026-145429

Name of the Vulnerable Software and Affected Versions Traccar versions 3.15 through 6.16.x Description An authentication bypass exists in the LdapProvider.login function when LDAP authentication is enabled. The system fails to reject empty passwords, which leads to LDAP binds being performed as...

CVE-2026-121557 WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot

WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken middleware. Attackers who know or guess a connected session name can POST outgoing message...

CVE-2026-121557

The WPPConnect Server (versions through 2.10.74 ) is vulnerable to a missing authentication flaw in the Chatwoot webhook route (/api/:session/chatwoot). The root cause is the absence of the verifyToken middleware, allowing unauthenticated attackers to send arbitrary WhatsApp messages, including t...

Metabase CVE-2023-38646 Detect

Checks /api/session/properties for leaked setup-token pre-auth RCE chain. !/usr/bin/env python3 -- coding: utf-8 -- """Metabase CVE-2023-38646 setup-token / H2 validate surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Exploit for SQL Injection in Metabase

CVE-2026-72898 — Metabase unauthenticated SQL injection Indep...

CVE-2026-108737

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

CVE-2026-108738

Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect callback never validates the OAuth state parameter. Attackers can induce a victim's browser to load...

EUVD-2026-96903

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

CVE-2026-108737 Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

CVE-2026-108737

Versions of Traccar through 6.16.0 are vulnerable to a weak password recovery flaw due to token purpose confusion in the TokenManager component. Because the system fails to bind tokens to a specific purpose, an attacker who obtains a leaked password reset link can reuse that token to establish a ...

CVE-2026-108737: Weak Password Recovery Mechanism for Forgotten Password

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...