News Metabase Zero-Day Hit Framework and Tally Before Anyone Had a Patch by Rebecca Sutton September 7, 2026 by Rebecca Sutton September 7, 2026 A maximum-severity Metabase SQL injection vulnerability was exploited in the wild before a fix existed, and Framework and Tally have both confirmed data loss. FacebookTwitterLinkedinEmail