Atlassian Rovo, Metabase, LoadMaster zero-days & active exploitation

### Executive Summary — Multiple high-risk, actively exploited vulnerabilities were reported across widely used enterprise tools: an Atlassian Rovo prompt-injection enabling data exfiltration, a Metabase unauthenticated admin zero-day (CVSS 10.0) tied to confirmed breaches, and a Progress Kemp LoadMaster command-injection (CVE-2026-8037) added to CISA KEV after hundreds of observed exploit attempts; additional threats include CSS-based webmail credential theft and persistence on N-able N-central-managed systems, with recommended immediate patching, isolation, and forensic review.