Metasploit Wrap-Up 04/10/2026

Rapid7 weekly roundup and product updates covering new Metasploit Framework modules and improvements, Active Directory Certificate Services tooling, and exploitation incident findings. Metasploit additions include an AD/CS authenticated web enrollment module, modules for Cisco Catalyst SD‑WAN Controller authentication bypass (linked to CVE-2026-20127 and observed exploited in the wild), new RCE modules targeting FreeScout, Grav CMS, and osTicket, Windows persistence enhancements, and msfvenom startup speed improvements. Rapid7 Incident Response details exploitation of FortiGate SSO signature‑b