Vulnerability | ArxDecoded

Metabase SQL Injection Vulnerability (CVE‑2026‑72898): Impact, Affected Versions, and Mitigation

August 25, 2026

JPCERT‑AT warns that Metabase versions prior to specific releases contain an unauthenticated SQL injection (CVE‑2026‑72898) that can grant admin access. Learn which versions are affected, how attackers exploit it, and what immediate steps you should take.

WordPress 7.0.4 Patched: Critical Remote Code Execution Vulnerability in Imagick

August 25, 2026

WordPress 7.0.4 is a critical security release addressing a Remote Code Execution (RCE) flaw in the Imagick library. Authenticated users with Author+ privileges can exploit this vulnerability via malicious file uploads. Immediate updates are recommended for all sites using Ghostscript and Imagick.