Metasploit Wrap-Up 05/15/2026
2026-05-16T07:23:47Z•9e56c41b4e2855750841d2f45195a03387eac7fabd7e83fed1069d193cb1712b
authentication-bypassciscocriticalfile-uploadin-the-wildmalwaremarvellmetasploitmicrosoft-patch-tuesdaymodeloRATnetlogonpalo-altopatch-managementpath-traversalphishingphp-injection-bypassremote-code-executionsd-wanteamsvim-persistence
What happened
Rapid7 round-up covering new Metasploit modules and multiple high-impact vulnerabilities: a Vim plugin persistence module, Marvell QConvergeConsole path traversal (CVE-2025-6793), GestioIP arbitrary file upload (CVE-2024-48760), Dolibarr PHP injection bypass (CVE-2023-30253), Palo Alto PAN-OS authentication bypass (CVE-2026-0265, High), and a critical Cisco Catalyst SD-WAN Controller authentication bypass (CVE-2026-20182, CVSS 10.0). The report also details a Teams-delivered ModeloRAT campaign that escalated via CVE-2023-36036, and Microsoft’s May 2026 Patch Tuesday which includes a critical R
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 9e56c41b4e2855750841d2f45195a03387eac7fabd7e83fed1069d193cb1712b
- Enrichment time
- 2026-05-16T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.