Latest / Tech Talks With Kinsoft
Metabase - The Reporting Tool That Held Every Key, and the Five Companies That Found Out
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
A deep-dive on CVE-2026-72898, the unauthenticated SQL injection zero-day exploited against Metabase Cloud in early August 2026.
Two corrections to our roundup of 17 August, made on air. A CVE has since been assigned - CVE-2026-72898, added to CISA's Known Exploited Vulnerabilities catalogue on 11 August and rated 10.0 under both CVSS v3.1 and v4.0. And LexisNexis has explicitly ruled out any connection between its service outage and this flaw: the similarly-named Nexis Metabase API is an…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.