Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules
2026-06-14T19:23:47Z•761c5520607892f0487c6344161be006905ac02d8c3c843969ff6a40c9da9cf8
Anthropic Project GlasswingCVE-2026-10520CVE-2026-10523CVE-2026-35273CertificateTraceIvanti SentryKerberosTicketTraceLLM/AI for securityMetasploitMicrosoftOracle PeopleSoftPatch TuesdayRCESSRFauthentication bypassautomated threat huntingcriminal AI-as-a-service
What happened
Rapid7 blog roundup (June 2026) covering multiple high-priority security topics: active exploitation of an Oracle PeopleSoft zero-day (CVE-2026-35273, CVSS 9.8) enabling remote code execution via a server-side request forgery, and two critical Ivanti Sentry flaws (CVE-2026-10520 — unauthenticated OS command injection/RCE with root, CVE-2026-10523 — authentication bypass leading to admin account creation). Additional posts detail a Metasploit update adding KerberosTicketTrace and CertificateTrace debugging options, trends in criminal AI-as-a-service, a Rapid7 project to automate threat hunting/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 761c5520607892f0487c6344161be006905ac02d8c3c843969ff6a40c9da9cf8
- Enrichment time
- 2026-06-14T19:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.