Skip to content
OpenAdvisories

Product · Rapid7

Metasploit Framework

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-87689

    Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

    The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential…

    Rapid7 Metasploit Framework