Tech Times on MSN

Metabase SQL injection breached five companies, exposed all connected database credentials

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...
The Hacker News

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...