Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

Rapid7 reports multiple security topics, including actively exploited critical vulnerabilities in Atlassian Data Center products and Cisco Catalyst SD-WAN Manager, Linux malware activity involving BPFDoor and AVERAT, trusted-channel abuse in the ASOS incident, and emerging AI-agent identity risks. The most urgent items are CVE-2026-76504, an unauthenticated Cisco SD-WAN Manager API authentication bypass exploited in the wild, and CVE-2026-21589, an unauthenticated arbitrary file access flaw affecting several Atlassian products with public proof-of-concept material.