Over 16,000 Supabase databases expose PII, passwords, auth tokens
Teaser from the source
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →More on databases
Other advisories
- osv:CVE-2026-102242nonePath Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
- CVE-2026-102242noneEine unzureichende Auflösung von Verknüpfungen (CWE-59 / CWE-22) in der Pfadüberprüfung der erlaubten lokalen Wurzeln in Google MCP Toolbox for Databases Versionen 1.
- CVE-2026-1497noneIncorrect privilege assignment in composite databases
- CVE-2026-11624noneMCP Toolbox for Databases has an Origin Validation Error in github.com/googleapis/genai-toolbox
- osv:CVE-2026-76635nonebaserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php
- osv:CVE-2026-53759nonelinuxfabrik-lib: Insecure creation of SQLite databases
- CVE-2026-14541highgoogle mcp_toolbox_for_databases: unzureichende Authentifizierung
- CVE-2026-14540highgoogle mcp_toolbox_for_databases: Server-Side-Request-Forgery (SSRF)
Other news entries
- Newstheregister-security2026-09-3016-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
- Newsdarkreading2026-09-28JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
- Newsbleepingcomputer2026-09-22Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
- Newsdarkreading2026-09-02Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
- Newsbleepingcomputer2026-08-17Hacker claims 3.6 million Azure account records stolen from major companies
- Newsncsc-nl2026-08-11NCSC-2026-0283 [1.00] [M/H] Kwetsbaarheden in Veeam ONE
- Newscsoonline2026-08-06Practical lessons from deploying AI securely at scale
- Newscsoonline2026-07-31Microsoft almost gave away the keys to everyone’s Azure Cosmos DBs
ID