What’s Vulnerable › Products
Rapid7 Metasploit Framework vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Rapid7 Metasploit Framework version is affected
Latest Rapid7 Metasploit Framework vulnerabilities
- CVE-2026-109682 — Metasploit Framework HTTP Redirect Server-Side Request Forgery (CVSS 4.7)
- CVE-2026-109681 — Metasploit Framework FTP PASV Response SSRF (CVSS 4.7)
- CVE-2026-87689 — Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints (CVSS 9.8)
- CVE-2026-87690 — Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution (CVSS 8.8)
- CVE-2026-7373 — Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading (CVSS 8.5)
- CVE-2023-0599 — Rapid7 Metasploit Pro Stored XSS (CVSS 4.8)
- CVE-2020-7385 — Metasploit Framework 'drb_remote_codeexec' code execution (CVSS 8.8)
- CVE-2020-7384 — Client-Side Command Injection in Rapid7 Metasploit (CVSS 7.8)
- CVE-2019-5645 — Rapid7 Metasploit HTTP Handler Denial of Service (CVSS 7.5)
- CVE-2020-7377 — Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module (CVSS 7.5)
- CVE-2020-7376 — Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module (CVSS 9.8)
- CVE-2020-7355 — Rapid7 Metasploit Pro Stored XSS in 'notes' field (CVSS 6.1)
- CVE-2020-7354 — Rapid7 Metasploit Pro Stored XSS in 'host' field (CVSS 5.4)
- CVE-2020-7350 — Metasploit Framework Plugin Libnotify Command Injection (CVSS 7.8)
- CVE-2019-5642 — MAGICK (CVSS 3.3)
- CVE-2019-5624 — Rapid7 Metasploit Framework Zip Import Directory Traversal (CVSS 7.3)
- CVE-2017-15084 — (CVSS 6.5)
- CVE-2017-5244 — (CVSS 3.5)
- CVE-2017-5235 — (CVSS 7.8)
- CVE-2017-5231 — (CVSS 7.1)
- CVE-2017-5229 — (CVSS 7.1)
- CVE-2017-5228 — (CVSS 7.1)