A critical Metabase SQL injection zero-day (CVSS 10) is exploited in the wild. Unauthenticated attackers gain admin access. Patch now. Related Posts: Multiple ClamAV Flaws Let Remote Attackers Cause DoS CryptoJS Randomness Vulnerability Drains Crypto Wallets CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10 The post Metabase SQL Injection Zero-Day (CVSS 10) Exploited appeared first on Daily CyberSecurity.