cve-2026-59827-metabase-cyber-range

CVE-2026-59827 — Metabase / H2 Unsafe Deserialization Cyber Range Educational laboratory modeling CVE-2026-59827 GHSA-w95f-x9v9-wv36: unsafe deserialization of H2 query result columns of type OTHER in Metabase. TRAINING ONLY — DO NOT EXPOSE TO THE INTERNET Quick start root@kitploit: git clone...

Metabase < 0.46.6.1 - Remote Code Execution

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2...

CVE-2021-41277_SSRF

CVE-2021-41277SSRF CVE-2021-41277 can be extended to an SSRF Description Metabase is an open source data analytics platform. Metabase versions 0.40.5 were affected by CVE-2021-41277 which led to local file inclusion according to the CVE description. While analyzing the finding described in Metaba...

CVE-2026-33725

CVE-2026-33725 PoC-эксплойт для CVE-2026-33725 — удалённое выполнение кода и произвольное чтение файлов через H2 JDBC INIT-инъекцию при импорте EE-сериализации в Metabase. Уязвимые версии Metabase Enterprise ≥ v1.47 и v1.54.22 Metabase Enterprise ≥ v1.54.0 и v1.54.22 Metabase Enterprise ≥ v1.55.0...

Metabase_Nmap_Script

MetabaseNmapScript C'est un script nmap pour la vulnérabilité Metabase CVE-2021-41277 UTILISATION -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNÉRABLE: -- | Metabase CVE-2021-41277 -- | État: VULNÉRABLE Exploitable -- | ID:...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read A small script I wrote myself; it's not well written, so please feel free to point out any issues. Disclaimer : The techniques provided are for learning and reference testing only. Any direct or indirect losses caused by using the information provided i...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...

CVE-2026-92813

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

CVE-2026-72898-metabase-sqli

CVE-2026-72898 — Metabase unauthenticated SQL injection detector + analysis -black Unauthenticated SQL injection in Metabase via POST /api/session/resetpassword. CVSS 10.0 , in the CISA KEV catalog, exploited in the wild. An undeclared field in the password-reset request body reaches the...

CVE-2026-92813 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

EUVD-2026-81071

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

CVE-2026-92813

Metabase (through 0.63.18 ) is vulnerable to a Server-Side Request Forgery (SSRF) caused by improper validation of the unspecified address 0.0.0.0 in custom GeoJSON URLs . An unauthenticated attacker can save a malicious GeoJSON entry using 0.0.0.0 and trigger server-side requests that reach loop...

CVE-2026-92813 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase - Lecture de fichiers arbitraires optional arguments: -h, --help afficher ce message d'aide et quitter -u url, --url url URL cible ex:"http://127.0.0.1" -f file, --file file Cibles dans le fichier ex:"ip.txt" Utilisation eg1:python3 Metabase-cve-2021-41277.py -u...

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Script de prueba de concepto para explotar CVE-2023-38646. Destinado únicamente a fines educativos y de investigación. Descripción Este es un script de prueba de concepto PoC basado en Python para explotar CVE-2023-38646, una vulnerabilidad que afecta a Metabase. El...

CVE-2021-41278

CVE-2021-41277 Herramienta de escaneo por lotes de la vulnerabilidad de lectura arbitraria de archivos en Metabase Versiones afectadas: root@kitploit: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Instrucciones de uso root@kitploit: usage: CVE-2021-41277.py -h -u URL -f FILE...

CVE-2021-41277

CVE-2021-41277 PoC Metabase es una plataforma de análisis de datos de código abierto. Se ha descubierto un problema de inclusión de archivos locales en algunas versiones de Metabase. Aquí está el código PoC para determinar si el objetivo tiene esta vulnerabilidad o no. Un adversario podría leer...

CVE-2022-24853

CVE-2022-24853 Ataque de reflexión / relay NTLM en Metabase CVE-2022-24853 Entrada de blog sobre el hallazgo: https://secure77.de/metabase-ntlm-relay-attack/ Aviso de seguridad de GitHub: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m POC root@kitploit:...

CVE-2026-59827

Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...

metabase-cve-2023-38646

cd /metabase-poc cat README.md 'EOF' CVE-2023-38646 — Metabase Pre-Auth Remote Code Execution Summary CVSS 9.8. Metabase versions before 0.46.6.1 / 1.46.6.1 and equivalent earlier branches expose a pre-authentication RCE via the /api/setup/validate endpoint, which is meant to validate database...