Metasploit Wrap-Up 05/08/2026

This Rapid7 collection (May 6–8, 2026) covers multiple security topics: Metasploit updates (payload fixes for linux/x64/exec and linux/armle/exec, expanded Copy Fail exploit payload support, improved exploit/multi/http/shiro_rememberme_v124_deserialize options, and a new/updated anonymous FTP scanner module that references CVE-1999-0497 and stores proof-of-exploit); a high-severity Palo Alto PAN-OS User‑ID Authentication Portal buffer overflow (CVE-2026-0300) with a vendor-confirmed in-the-wild exploit and CVSSv4 9.3; threat reporting on a MuddyWater (Seedworm) campaign that used social-engine