Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

Rapid7 reporting highlights several security developments, including actively exploited critical vulnerabilities in Cisco Catalyst SD-WAN Manager and Atlassian Data Center products. CVE-2026-76504 enables unauthenticated remote API authentication bypass and full administrative access, while CVE-2026-21589 permits unauthenticated arbitrary file access when an attacker knows the target path. The collection also covers Linux malware targeting telecom and appliance environments, including BPFDoor, Rekoobe, and AVERAT, plus incident response, AI-agent identity, and higher-education compliance risks