Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Rapid7 Metasploit | 0-Doubt

Home
Vendors
Rapid7
Rapid7 Metasploit

Home
Vendors
Breach & Attack Simulation / Pen Testing
Rapid7 Metasploit

Rapid7 Metasploit

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 87 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Penetration testing software for simulating attacks and validating vulnerabilities

by Rapid7 · rapid7.com · source ↗

Screenshots

1

Rapid7 Metasploit — screenshot

Known CVEs (87)2 new

CVE-2026-97228 ↗LOW 2.7new2026
Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status` in `src/export_manager.py`), whereby the `export_id`…
CVE-2026-89325 ↗HIGH 7.8new2026
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable …

News about Rapid7 Metasploit (6)

All Rapid7 news →

ReleaseMetasploit Pro 5.1 Released
Vendor blogAug 3, 2026names “Metasploit”
ReleaseMetasploit Framework 6.5 Released
Vendor blogJul 30, 2026names “Metasploit”
AnnouncementMetasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Vendor blogOct 9, 2026names “Metasploit”
AnnouncementMetasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Breach & Attack Simulation / Pen Testing products

Prompt Security Prompt Fuzzer · Prompt Security
QGroup GmbH · QGroup GmbH
Qualysec Technologies · Qualysec Technologies
REDLattice · REDLattice
Red Specter Cheatsheet · Red Specter Security
Red Specter Nightfall · Red Specter Security
Red Specter POLTERGEIST · Red Specter Security
RedMimicry · RedMimicry

CVE-2026-14172 ↗HIGH 7.82026

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as t…

…and 84 more · see all on the vendor page →

Vendor blog·Sep 25, 2026·names “Metasploit”

AnnouncementMetasploit Wrap Up: This One Goes to Sixteen!

Vendor blog·Sep 11, 2026·names “Metasploit”

AnnouncementMetasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Vendor blog·Aug 28, 2026·names “Metasploit”