View Ridge Security
Back to Cyber Hose

Critical Credential Exposure in Metasploit Framework Web Service API

CVSS 9.8 credential exposure in Rapid7 Metasploit Framework headlines this run, plus multiple LG webOS root command execution flaws.

🔓 CVEs & KEV

  • CVE-2026-87689 — Rapid7 Metasploit Framework — CVSS 9.8 — Unauthenticated Credential Exposure in Metasploit Framework Web Service API

  • CVE-2023-6318 — Lg Webos — CVSS 9.1 — LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

  • CVE-2023-6319 — Lg Webos — CVSS 9.1 — LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

  • CVE-2023-6320 — Lg Webos — CVSS 9.1 — LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

  • CVE-2023-6317 — Lg Webos — CVSS 7.2 — LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check