Rapid7 Metasploit Framework

• CVE-2026-121139 High 7.8 Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication 0.2%
• CVE-2026-109682 Medium 4.7 Metasploit Framework HTTP Redirect Server-Side Request Forgery 0.2%
• CVE-2026-109681 Medium 4.7 Metasploit Framework FTP PASV Response SSRF 0.2%
• CVE-2026-87689 Critical 9.8 Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints 0.4%
• CVE-2026-87690 High 8.8 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution 0.4%
• CVE-2026-16895 Medium 5.1 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails 0.2%
• CVE-2020-7385 High 8.1 Metasploit Framework 'drb_remote_codeexec' code execution 1.8%
• CVE-2020-7377 High 8.1 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module 1.1%
• CVE-2020-7376 High 7.1 Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module 1.1%
• CVE-2020-7350 Medium 6.1 Metasploit Framework Plugin Libnotify Command Injection 5.0%