Metasploit Wrap Up 05/22/2026
2026-05-22T19:23:51Z•23c563e7d53abd16d6e69dd9269f4cef4bef8d304c67541833d3274fdc863fd4
Barracuda Email Security GatewayCRLF-injectionCisco Catalyst SD-WANHUSTOJPalo Alto PAN-OSTenable Security Centerauthentication-bypasscPanel/WHMcredential-theftexploit-modulemetasploitrapid7remote-code-executionzero-clickzip-slip
What happened
Rapid7 blog roundup and advisories covering multiple published Metasploit modules and vendor advisories. Highlights include a Metasploit module for a critical authentication bypass in Cisco Catalyst SD‑WAN Controller (CVE-2026-20182), a HUSTOJ zip-slip RCE (CVE-2026-24479), an eval-based RCE in Barracuda Email Security Gateway (CVE-2023-7102), a cPanel/WHM authentication bypass escalating to root via CRLF injection (CVE-2026-41940), and a Palo Alto PAN-OS signature verification/authentication bypass (CVE-2026-0265). Additional noted issues include Marvell QConvergeConsole path traversal (CVE-0
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 23c563e7d53abd16d6e69dd9269f4cef4bef8d304c67541833d3274fdc863fd4
- Enrichment time
- 2026-05-22T19:23:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.