Metasploit Wrap Up 05/29/2026
2026-05-30T19:23:49Z•640bd9bf3a75699429bd8668149c8ab5f72a577c7e041d4269ae7a41cf0377f9
active-exploitationauthenticated-rceauthentication-bypasscisa-kevcitrix-bleedcitrix-netscalercwe-88dirty-fragglobalprotectgogsinfo-leaklinux-lpelocal-privilege-escalationmetasploitpalo-altoremote-code-executionunpatchedvulnerability-scanner
What happened
Rapid7 posts highlight multiple high-impact vulnerabilities and active exploitation. Metasploit added new Linux local privilege escalation modules for 'Dirty Frag' (CVE-2026-43284 and CVE-2026-43500) plus several new auxiliary scanner modules (including a Citrix ADC/NetScaler info‑leak scanner for CVE-2026-3055). Rapid7 observed active exploitation of PAN‑OS GlobalProtect authentication bypass CVE-2026-0257 (added to CISA KEV) and urges urgent patching. Rapid7 Labs disclosed an unauthenticated/ authenticated RCE in Gogs via argument injection (CWE-88) rated CVSSv4 9.4 and reported as unfixed.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 640bd9bf3a75699429bd8668149c8ab5f72a577c7e041d4269ae7a41cf0377f9
- Enrichment time
- 2026-05-30T19:23:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.