Metasploit Wrap-Up 04/17/2026
2026-04-18T07:23:47Z•442ea563909125edc81fbbf25a5637b1de606153b5760dd00dc6ebd42d34b6bd
avideobitschurchcrmclickfixcredential-dumpexploitmetasploitnginx-uiopenDCIMpersistencephishingpowershell-profilerceselenium-gridsql-injectiontelemetrywindows-persistence
What happened
Rapid7 blog roundup (04/17/2026) highlighting seven new Metasploit Framework modules: unauthenticated SQLi credential dump for AVideo (CVE-2026-28501), an openDCIM install.php SQLi → RCE exploit (CVE-2026-28517), additional RCE modules (Selenium Grid/Selenoid, ChurchCRM), and three new Windows post‑exploitation persistence modules (Telemetry scheduled tasks, PowerShell profiles, Microsoft BITS). The feed also includes coverage of other notable issues this period — notably CVE-2026-33032 (Nginx UI missing MCP authentication, CVSS 9.8), a ClickFix phishing campaign impersonating a Claude AI-inst
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 442ea563909125edc81fbbf25a5637b1de606153b5760dd00dc6ebd42d34b6bd
- Enrichment time
- 2026-04-18T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.