Vendor
Authenticated Remote Code Execution in Metabase via H2 Deserialization
1 rule 2 TTPs 1 CVEMetabase instances configured with H2 databases are vulnerable to authenticated remote code execution via insecure Java deserialization triggered through native SQL queries, identified as CVE-2026-59827.
Critical Pre-Authentication RCE in Metabase (CVE-2023-38646)
1 rule 2 TTPs 1 CVEA critical pre-authentication Remote Code Execution vulnerability in Metabase allows unauthenticated attackers to execute arbitrary system commands via malicious H2 database connection strings.
Critical SQL Injection and Privilege Escalation Vulnerability in Metabase
2 TTPs 1 CVEAn unauthenticated remote attacker can exploit a vulnerability in Metabase to perform SQL injection and escalate privileges.
Metabase Enterprise Remote Code Execution via Serialization Import
2 rules 1 TTPAuthenticated administrators in vulnerable Metabase Enterprise editions can achieve Remote Code Execution (RCE) and Arbitrary File Read by injecting an `INIT` property into the H2 JDBC spec via a crafted serialization archive through the `POST /api/ee/serialization/import` endpoint.