Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

Rapid7 reporting highlights several security topics, including two critical actively exploitable vulnerabilities: CVE-2026-21589, an unauthenticated arbitrary file access flaw affecting multiple Atlassian Data Center products, and CVE-2026-76504, an unauthenticated authentication bypass in Cisco Catalyst SD-WAN Manager exploited in the wild. Additional coverage discusses Linux malware targeting telecom network edges, including BPFDoor and AVERAT, trusted-channel abuse in the ASOS incident, AI-agent identity risks, and higher-education compliance challenges.