Metasploit Wrap Up 05/22/2026

Rapid7 blog roundup and advisories describing multiple weaponized vulnerabilities and Metasploit modules. Highlights include a critical authentication bypass in Cisco Catalyst SD‑WAN Controller (CVE-2026-20182) now patched and weaponized as a Metasploit module, a High authentication bypass in Palo Alto PAN‑OS (CVE-2026-0265), and several other exploitable issues (zip-slip RCE, eval-based RCE in Barracuda, CRLF-to-root cPanel/WHM bypass, credential-extraction against Tenable). Several of these issues have public exploit modules or proof‑of‑concepts, and vendors have issued advisories/patches.