Metasploit Wrap-Up 05/15/2026

Rapid7 posts summarize multiple high- and critical‑severity vulnerabilities and active intrusion activity. Highlights include a Metasploit wrap-up (new modules and persistence tooling such as a Vim plugin), Marvell QConvergeConsole path traversal and other web upload/bypass issues, a PAN‑OS authentication‑bypass (CVE‑2026‑0265) when Cloud Authentication Service is enabled (High), and a Critical authentication‑bypass in Cisco Catalyst SD‑WAN Controller (CVE‑2026‑20182, CVSS 10.0) that allows an unauthenticated attacker to become an authenticated peer. Rapid7 also documents a ModeloRAT campaign—