Metasploit Wrap Up 05/22/2026
2026-05-25T07:23:47Z•58cbda39d6f3f4a9eee2baab810cab17b476166176c7b50eb95ce024fdf59bd3
authentication-bypasscisco-sd-wancpanelcredential-theftcriticalcrlf-injectionhigh-riskmetasploitpalo-alto-pan-ospatchingremote-code-executiontenableweaponizationzip-slip
What happened
Rapid7 blog posts (Metasploit wrap-ups and ETRs) describe multiple newly published and weaponized vulnerabilities, most notably a critical authentication bypass in Cisco Catalyst SD‑WAN Controller (CVE-2026-20182) that allows a remote unauthenticated attacker to become an authenticated peer and perform privileged operations. The collection also highlights active Metasploit modules and exploits for HUSTOJ zip-slip RCE (CVE-2026-24479), Barracuda Email Security Gateway (CVE-2023-7102), a cPanel/WHM authentication bypass escalating to root via CRLF injection (CVE-2026-41940), and a PAN‑OS Cloud‑S
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 58cbda39d6f3f4a9eee2baab810cab17b476166176c7b50eb95ce024fdf59bd3
- Enrichment time
- 2026-05-25T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.