SQL Injection | ArxDecoded

Metabase SQL Injection Vulnerability (CVE‑2026‑72898): Impact, Affected Versions, and Mitigation

August 25, 2026

JPCERT‑AT warns that Metabase versions prior to specific releases contain an unauthenticated SQL injection (CVE‑2026‑72898) that can grant admin access. Learn which versions are affected, how attackers exploit it, and what immediate steps you should take.

WordPress 7.0.2 Patch: Critical Security Fixes for SQL Injection and Remote Code Execution

August 25, 2026

WordPress 7.0.2 is a security release addressing one critical and one high-severity vulnerability. The update fixes a Remote Code Execution flaw in the REST API batch-route and a facilitated SQL injection issue. WordPress.org has enabled forced auto-updates for affected sites.