EUVD-2026-55690

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

CVE-2025-51543

CVE-2025-51543 affects Cicool builder 3.4.4. The vulnerability allows an attacker to reset the administrator password via the /administrator/auth/reset_password endpoint. The CVSS 3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privileges or user interaction required, and impacts ...