Metasploit Wrap-Up 04/10/2026

Rapid7 blog roundup: Metasploit received multiple new modules and improvements (including an msfvenom startup speedup). Notable module additions include an AD/CS Authenticated Web Enrollment auxiliary module and an auxiliary module for a Cisco Catalyst SD‑WAN Controller authentication bypass that maps to CVE‑2026‑20127 (recently observed exploited in the wild). Rapid7’s IR team also published findings on active exploitation of FortiGate vulnerabilities (CVE‑2025‑59718 and related CVE‑2025‑59719) that enable SSO signature/verification bypasses and were used to pivot into internal networks. The