CVE-2026-87689 - Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints
CVE ID :CVE-2026-87689 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate!...