Metabase vulnerability CVE-2026-72898: Find impacted assets

Metabase On-Premises contains a critical SQL injection vulnerability (CVE-2026-72898, CVSS 10.0) in a password reset API endpoint that allows unauthenticated remote attackers to inject arbitrary SQL, potentially gaining administrator access and exfiltrating connected database data; multiple Metabase x.58.x through x.63.x versions are affected, active exploitation has been observed, and mitigations require upgrading to specified fixed versions.