Metabase's Unauthenticated SQL-Injection Zero-Day (CVE-2026-72898, CVSS 10.0): A Defender's Deep Report

“Produce a defender-focused deep report on: Metabase SQL-injection zero-day (CVSS 10) already used to breach n8n and Framework — CISA added it to KEV overnight. Explain in technical terms what the underlying weakness is and why it occurs, the full affected and fixed version matrix, whether it is being exploited in the wild and how widely (with the evidence defenders can independently verify), detec”