Rapid7 Metasploit Framework vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20204
3. 20211
4. 20265

Newest CVEs

• CVE-2026-121139

  Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication

  Rapid7 · Metasploit Framework

  High7.3
• CVE-2026-109682

  Metasploit Framework HTTP Redirect Server-Side Request Forgery

  Rapid7 · Metasploit Framework

  Medium4.7
• CVE-2026-109681

  Metasploit Framework FTP PASV Response SSRF

  Rapid7 · Metasploit Framework

  Medium4.7
• CVE-2026-87689

  Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

  Rapid7 · Metasploit Framework

  Critical9.8
• CVE-2026-87690

  Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

  Rapid7 · Metasploit Framework

  High8.8
• CVE-2020-7385

  Metasploit Framework 'drb_remote_codeexec' code execution

  Rapid7 · Metasploit Framework

  High8.1
• CVE-2019-5645

  Rapid7 Metasploit HTTP Handler Denial of Service

  Rapid7 · Metasploit Framework

  High7.5
• CVE-2020-7377

  Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module

  Rapid7 · Metasploit Framework

  High8.1
• CVE-2020-7376

  Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

  Rapid7 · Metasploit Framework

  High7.1
• CVE-2020-7350

  Metasploit Framework Plugin Libnotify Command Injection

  Rapid7 · Metasploit Framework

  Medium6.1