Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

Rapid7 reports multiple security topics, including two critical, actively relevant vulnerabilities: CVE-2026-21589, an unauthenticated arbitrary file access flaw affecting several Atlassian Data Center products with public proof-of-concept code, and CVE-2026-76504, an unauthenticated Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild. The feed also covers Linux malware targeting telecom and network-edge appliances, including BPFDoor, Rekoobe, and AVERAT, plus trusted-channel abuse and emerging AI-agent security risks.