Here are the main stories you missed last week. 1. Metabase: A CVSS 10.0 zero-day in the password reset endpoint gave unauthenticated attackers admin access to every database the platform had ever connected to The headline: Metabase disclosed CVE-2026-72898 on August 6, a maximum-severity SQL injection vulnerability in the publicly accessible /api/session/reset_password endpoint that allows […] The post Cyber Roundup — Week of August 10th appeared first on CybelAngel .
Discovery
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules