Threats Tagged 'cve-2026-16895'
View all threats tagged with 'cve-2026-16895'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-16895'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-16895 is a logic vulnerability in the Rapid7 Metasploit Framework's JSON-RPC web service interface. It arises when an exception during the database health check causes the internal authentication state to reset improperly if a specific environment variable is not set. This leads to an authentication bypass, granting unauthenticated local access to the JSON-RPC request dispatcher. Join the discussion | GCVE Database | 08/27/2026, 03:14:21 UTC Added: 08/27/2026, 15:12:57 UTC |
0 CVE-2026-16895 is a logic vulnerability in the Rapid7 Metasploit Framework's JSON-RPC web service interface. The flaw arises when an exception during a database health check causes the internal authentication state to reset improperly, allowing unauthenticated local access. This occurs if the environment variable MSF_WS_JSON_RPC_API_TOKEN is not set, leading the authentication mechanism to mistakenly allow access without credentials. The vulnerability affects versions prior to 6.5.2 and has a medium severity rating. Join the discussion | CVE Database V5 | 08/27/2026, 03:14:21 UTC Added: 08/27/2026, 04:07:53 UTC |
Showing 1 to 2 of 2 results