Known vulnerabilities in Metasploit

Vendor: Rapid7
Software: Metasploit
Software CPE: cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Metasploit Metasploit is affected by 6 known vulnerabilities: 2 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126644 - Improper Access Control
CVE-2026-41316
CWE-284 High
No
No
6.4.126 21.04.2026 SB2026042131
SB20260509132
SB2026051815
and 11 more
#VU30166 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7354
CWE-79 Low
No
No
4.17.1 25.06.2020 SB2020062521
#VU30167 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7355
CWE-79 Low
No
No
4.17.1 25.06.2020 SB2020062521
#VU27308 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-7350
CWE-78 High
Available
No
5.0.85 24.04.2020 SB2020042411
#VU23863 - Improper input validation
CVE-2019-5645
CWE-20 Medium
Available
No
- 02.01.2020 SB2020010203
#VU35112 - Incorrect Permission Assignment for Critical Resource
CVE-2019-5642
CWE-732 Low
No
No
4.16.0 06.11.2019 SB2019110666