NewsThe Hacker News2026-10-08 15:45 UTCSME Public Sector

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and other information. The alert names no attacker and no affected organization. JPCERT/

Other advisories

CVE-2026-92813none
Metabase bis Version 0.
osv:CVE-2026-92813none
Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
osv:CVE-2026-86116none
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
CVE-2026-72899high
Metabase: Mehrere Schwachstellen
CVE-2026-72898critical
Metabase: Schwachstelle ermöglicht SQL-Injection und Privilegieneskalation
CVE-2026-72898none
metabase: SQL-Injection
CVE-2026-72900none
Metabase: fehlende Autorisierung
CVE-2026-72899none
Metabase: SQL-Injection

Other news entries

Newstheregister-security2026-09-17
London property manager breach may have exposed bank details and lockbox codes
Newscert-fr2026-09-10
Vulnérabilité dans Metabase (10 septembre 2026)
Newssecurityweek2026-09-08
Mathspace Data Breach Exposes Over 1 Million People
Newsbleepingcomputer2026-09-07
Mathspace discloses data breach affecting over 1 million people
Newscert-fr2026-08-24
Multiples vulnérabilités dans Metabase (24 août 2026)
Newscsoonline2026-08-12
Metabase SQLi exploit grants attackers total access
Vulnerabilitysans-newsbites-mail2026-08-12
Metabase Patches Critical SQL Vulnerability, Notifies Framework That Customer Data Were Compromised
Vulnerabilitybsi-cert-bund-wid2026-08-11
Metabase: Mehrere Schwachstellen

Source: https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html

More on Metabase