Metasploit Wrap Up 05/29/2026
2026-05-31T07:23:47Z•4acb7b22f54d6f0e767e00cc6df1ca8ce80cd94a39f68f0038b0ed3dec445528
authenticated-rceauthentication-bypasscisa-kevcitrix-netscalerdirty-fragglobalprotectgogslinux-lpemetasploitobserved-exploitationpalo-altopan-osrapid7threat-landscapevulnerability-managementzero-click
What happened
A Rapid7 blog roundup (late May 2026) covering multiple active and high-impact vulnerabilities and Metasploit module additions. Highlights include two new Linux local privilege escalations dubbed “Dirty Frag” (CVE-2026-43284, CVE-2026-43500) with Metasploit modules; an auxiliary scanner for a Citrix NetScaler info-leak (CVE-2026-3055); observed exploitation in the wild of a PAN-OS GlobalProtect authentication bypass (CVE-2026-0257) — Rapid7 MDR saw successful exploitation and urges organizations to treat it as critical; and an unfixed, critical authenticated RCE in Gogs via argument injection,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 4acb7b22f54d6f0e767e00cc6df1ca8ce80cd94a39f68f0038b0ed3dec445528
- Enrichment time
- 2026-05-31T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.