Metasploit Wrap-Up 02/27/2026
2026-03-04T21:32:41Z•51b9357cb1a7f1c1f5d8c5c2b4a5b15b278c845ef78bea61b1336c1435df646b
CVE-2024-37032CVE-2025-62521CVE-2025-7441CVE-2026-1731CVE-2026-20127CVE-2026-21858CVE-2026-2329BeyondTrustChurchCRMCiscoDICOMGrandstreamIoT/VoIPOllamaSOCStoryChiefalert-fatigueauthentication-bypasscredential-harvestingdigital-footprintexploited-in-the-wildhealthcare-exposuremetasploitn8nransomwareremote-code-execution
What happened
This Rapid7 digest highlights multiple high-impact vulnerability disclosures and Metasploit module additions. Key items: new Metasploit modules for Ollama path-traversal RCE (CVE-2024-37032) and a chained unauthenticated arbitrary-file-write → root RCE, a Grandstream GXP1600 stack overflow (CVE-2026-2329) with credential harvesting and SIP interception capability, and updated support for BeyondTrust PRA/RS command injection (CVE-2026-1731). Rapid7 also reports a critical Cisco Catalyst SD‑WAN authentication bypass (CVE-2026-20127) actively exploited in the wild — immediate patching is advised.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 51b9357cb1a7f1c1f5d8c5c2b4a5b15b278c845ef78bea61b1336c1435df646b
- Enrichment time
- 2026-03-04T21:32:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.