From Vectors to Verdicts: Web App Testing with Vector Command
2026-03-25T19:23:50Z•968398db712b49d6689de696405801e9fc31051e220756e85750ba15bd70fd55
AT-commandsBSI-C5CVE-2025-64328CVE-2026-29058CVE-2026-3055CVE-2026-31381','CVE-2026-31382board-communicationcellularcitrixcommand-injectioncomplianceexploit-modulesgainsighthardware-tamperinginformation-disclosureiotmanaged-red-teammetasploitnetscalerpoctoolsrisk-managementvector-commandvulnerability-managementweb-applicationsxss
What happened
Rapid7 posts covering multiple security topics: Vector Command’s focus on realistic web‑app testing and managed red‑team activity; a new whitepaper demonstrating practical attacks against cellular IoT modules (including PoC tools such as AT‑command TCP scanner, S3 enumerator, SOCKS5 proxy, and a Metasploit proxy) and hardware techniques to assume control of cellular modems; confirmation that Rapid7’s Command Platform completed BSI C5 Type 2 attestation for DACH customers; disclosure of Citrix NetScaler ADC/Gateway out‑of‑bounds read (CVE-2026-3055, CVSS 9.3) impacting SAML IDP configurations;披
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 968398db712b49d6689de696405801e9fc31051e220756e85750ba15bd70fd55
- Enrichment time
- 2026-03-25T19:23:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.