{"schema":"vulnpedia.poc/1","cve":"CVE-2026-72898","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-08-11","ransomware":false},"epss":{"score":0.98552,"percentile":0.99922},"cvss":{"version":"4.0","score":10,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/dfaba18343ac","executable":false,"sourceId":"dfaba18343ac","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dfaba18343ac","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/dfaba18343ac"}],"repositoryUrl":"https://github.com/4minx/CVE-2026-72898"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8a6c6b2e91ce","executable":false,"sourceId":"8a6c6b2e91ce","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8a6c6b2e91ce","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/8a6c6b2e91ce"}],"repositoryUrl":"https://github.com/VuxNx/CVE-2026-72898"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/de4818455f6a","executable":false,"sourceId":"de4818455f6a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"de4818455f6a","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/de4818455f6a"}],"repositoryUrl":"https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9506a8020d21","executable":false,"sourceId":"9506a8020d21","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9506a8020d21","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/9506a8020d21"}],"repositoryUrl":"https://github.com/EQSTLab/CVE-2026-72898"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d54ac2d8e10a","executable":false,"sourceId":"d54ac2d8e10a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d54ac2d8e10a","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/d54ac2d8e10a"}],"repositoryUrl":"https://github.com/amier-ge/CVE-2026-72898"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/729cd60ea125","executable":false,"sourceId":"729cd60ea125","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"729cd60ea125","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/729cd60ea125"}],"repositoryUrl":"https://github.com/Riftweld/metabase-cve-2026-72898"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/41e4cdaa8fe9","executable":false,"sourceId":"41e4cdaa8fe9","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"41e4cdaa8fe9","modified":"2026-08-06T00:00:00Z","url":"https://vulncheck.com/xdb/41e4cdaa8fe9"}],"repositoryUrl":"https://github.com/gagaltotal/CVE-2026-72898-metabase"}],"poc_candidates":[{"url":"https://github.com/0xBlackash/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898","modified":"2026-10-07T10:52:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/0xBlackash/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-10-07T10:52:02Z","url":"https://github.com/0xBlackash/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/codeb0ssx/CVE-2026-72898-PoC","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898 - Metabase","modified":"2026-08-13T21:11:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/codeb0ssx/CVE-2026-72898-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-08-13T21:11:14Z","url":"https://github.com/codeb0ssx/CVE-2026-72898-PoC"}],"tags":[]},{"url":"https://github.com/4minx/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection","modified":"2026-10-12T23:01:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/4minx/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-10-12T23:01:15Z","url":"https://github.com/4minx/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898-Metabase-SQLi-Fix","modified":"2026-08-15T10:47:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-08-15T10:47:54Z","url":"https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix"}],"tags":[]},{"url":"https://github.com/VuxNx/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"PoC for CVE-2026-72898","modified":"2026-08-16T02:38:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/VuxNx/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-08-16T02:38:17Z","url":"https://github.com/VuxNx/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/Franc-Zar/CVE-2026-72898-safe-detection","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)","modified":"2026-08-20T17:03:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/Franc-Zar/CVE-2026-72898-safe-detection"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-08-20T17:03:56Z","url":"https://github.com/Franc-Zar/CVE-2026-72898-safe-detection"}],"tags":[]},{"url":"https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)","modified":"2026-08-26T18:37:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-08-26T18:37:53Z","url":"https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli"}],"tags":[]},{"url":"https://github.com/EQSTLab/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"Metabase SQLi","modified":"2026-09-29T04:47:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/EQSTLab/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-09-29T04:47:36Z","url":"https://github.com/EQSTLab/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/34zY/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898 exploit","modified":"2026-09-14T12:24:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/34zY/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-09-14T12:24:05Z","url":"https://github.com/34zY/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/amier-ge/CVE-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898 Metabase SQL injection lab with vulnerable and patched versions, admin session creation, CSV export, order deletion, and recovery.","modified":"2026-10-07T09:08:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/amier-ge/CVE-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-10-07T09:08:52Z","url":"https://github.com/amier-ge/CVE-2026-72898"}],"tags":[]},{"url":"https://github.com/Riftweld/metabase-cve-2026-72898","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5)","modified":"2026-10-12T07:09:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/Riftweld/metabase-cve-2026-72898"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-10-12T07:09:03Z","url":"https://github.com/Riftweld/metabase-cve-2026-72898"}],"tags":[]},{"url":"https://github.com/gagaltotal/CVE-2026-72898-metabase","source":"poc-in-github","sourceId":"CVE-2026-72898","description":"CVE-2026-72898 Metabase Security Tools","modified":"2026-10-13T09:16:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-72898","url":"https://github.com/gagaltotal/CVE-2026-72898-metabase"},{"source":"poc-in-github","sourceId":"CVE-2026-72898","modified":"2026-10-13T09:16:04Z","url":"https://github.com/gagaltotal/CVE-2026-72898-metabase"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-72898 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-72898/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-72898.yaml","template":"http/cves/2026/CVE-2026-72898.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-72898%22&type=repositories","executable":false}]}