ThreatsTechnology, Cloud & SaaSCriticalMetabase Business Intelligence SQL Injection Vulnerability CVE-2026-72898 Added to CISA KEV CatalogCISA alerts enterprises to active exploitation of CVE-2026-72898, a critical SQL injection flaw in Metabase analytics dashboards allowing database exfiltration.CST Newsroom·16 Sep 2026, 03:50 IST·9 min read