https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Metabase.Sat, 12 Sep 2026 21:30:25 GMThttps://cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalogcst-4260CISA added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on active exploitation evidence: a Cisco firewall heap inspection flaw, a Microsoft Windows use-after-free issue, and a Metabase SQL injection bug. The agency reinforced that federal agencies must prioritize patching KEV-listed vulnerabilities on publicly exposed systems and investigate potential compromise before patch application, per Binding Operational Directive 26-04. CISA encourages all organizations to adopt risk-based vulnerability management aligned with KEV prioritization. Grouped because: title similarity 56 plus shared entities: CVE-2026-20349 Sources: CISA Alerts and Advisories, Cisco Talos, The Hacker News, Help Net Security.Tue, 11 Aug 2026 12:00:00 GMT