Rapid7 Metasploit Framework vulnerabilities

• rapid7 metasploit framework Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication CVE-2026-121139 7.3 HighNovember 5, 2026
• rapid7 metasploit framework Metasploit Framework HTTP Redirect Server-Side Request Forgery CVE-2026-109682 4.7 MediumOctober 20, 2026
• rapid7 metasploit framework Metasploit Framework FTP PASV Response SSRF CVE-2026-109681 4.7 MediumOctober 20, 2026
• rapid7 metasploit framework Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints CVE-2026-87689 9.8 CriticalOctober 13, 2026
• rapid7 metasploit framework Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution CVE-2026-87690 Public exploit 8.8 HighOctober 12, 2026
• rapid7 metasploit, metasploit framework +1 more Metasploit Framework 'drb_remote_codeexec' code execution CVE-2020-7385 Fix available 8.1 HighApril 23, 2021
• rapid7 metasploit, metasploit framework +1 more Rapid7 Metasploit HTTP Handler Denial of Service CVE-2019-5645 EPSS 49.2% 7.5 HighSeptember 1, 2020
• rapid7 metasploit, metasploit framework +1 more Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module CVE-2020-7377 8.1 HighAugust 24, 2020
• rapid7 metasploit, metasploit framework +1 more Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module CVE-2020-7376 7.1 HighAugust 24, 2020
• rapid7 metasploit, metasploit framework +1 more Metasploit Framework Plugin Libnotify Command Injection CVE-2020-7350 Public exploit 6.1 MediumApril 22, 2020
• rapid7 metasploit, metasploit framework +1 more Rapid7 Metasploit Framework Zip Import Directory Traversal CVE-2019-5624 Public exploit 7.4 HighApril 30, 2019