Product by Rapid7
Metasploit Framework
11 known vulnerabilities in Metasploit Framework (Rapid7), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-5645 | Rapid7 Metasploit HTTP Handler Denial of Service | 7.5 | |
| High | CVE-2020-7350 | Metasploit Framework Plugin Libnotify Command Injection | 6.1 | |
| High | CVE-2019-5624 | Rapid7 Metasploit Framework Zip Import Directory Traversal | 7.4 | |
| High | CVE-2020-7385 | Metasploit Framework 'drb_remote_codeexec' code execution | 8.1 | |
| Critical | CVE-2026-87689 | Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints | 9.8 | |
| High | CVE-2026-87690 | Rapid7 Metasploit Framework: Path Traversal | 8.8 | |
| High | CVE-2020-7377 | Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module | 8.1 | |
| Critical | CVE-2020-7376 | Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module | 7.1 | |
| Medium | CVE-2026-109681 | Metasploit Framework FTP PASV Response SSRF | 4.7 | |
| Medium | CVE-2026-109682 | Metasploit Framework HTTP Redirect Server-Side Request Forgery | 4.7 | |
| Medium | CVE-2026-16895 | Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails | — |