ME
Product
Metasploit-framework
6
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Metasploit-framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87689 | 9.8 | Oct 13 | Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints Affected: through 6.5.4 |
| CVE-2026-87690 | 8.8 | Oct 12 | Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution Affected: before 6.5.5 |
| CVE-2019-5645 | 7.5 | Sep 1 | Rapid7 Metasploit HTTP Handler Denial of Service Affected: through 5.0.27 |
| CVE-2026-16895 | 5.1 | Aug 27 | Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails Affected: before 6.5.2 |
| CVE-2026-109682 | 4.7 | Oct 20 | Metasploit Framework HTTP Redirect Server-Side Request Forgery Affected: before 6.5.7 |
| CVE-2026-109681 | 4.7 | Oct 20 | Metasploit Framework FTP PASV Response SSRF Affected: before 6.5.7 |
Showing 6