Metasploit Wrap-Up 04/25/2026
2026-04-26T19:23:52Z•b390e2fa8ea12132bccbd160612e6535284e08e4f8fa85746c23ecffa880ab23
ai-vulnerability-discoveryavideocamaleon-cmsdirectory-traversalkybermcp-bulk-exportmetasploitopendcimproject-glasswingransomwaresql-injectionvmware-esxivulnerability-exploitationwindows
What happened
Rapid7 blog roundup covering Metasploit framework updates, new exploit/auxiliary modules, a detailed Kyber ransomware analysis, and Rapid7 product/AI guidance. Metasploit changes include clearer check-method visibility and SMB1 improvements and added modules exploiting Camaleon CMS directory traversal (CVE-2024-46987), AVideo unauthenticated SQLi (CVE-2026-28501), and an openDCIM SQLi→RCE chain (CVE-2026-28517). The Kyber ransomware family is highlighted as a high-risk, dual-platform threat targeting VMware ESXi datastores and Windows file systems (Rust variant with experimental Hyper-V target
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- b390e2fa8ea12132bccbd160612e6535284e08e4f8fa85746c23ecffa880ab23
- Enrichment time
- 2026-04-26T19:23:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.