Metasploit Wrap-Up 03/27/2026
2026-03-30T07:23:51Z•eb1979a7e89506ef8c5a847c49fba8570fc1e11b3172af5bd38775996b9aba1e
BPFdoorBSI C5 Type 2CVE-2026-23767CVE-2026-3055CVSSCitrix NetScalerESC/POSEclipse CheEpson printersIoT cellular exploitationNTLM relayingRed MenshenRubySMBSAML IDPSMBVector Commandmetasploitout-of-bounds readtelecom backdoortelecom espionageunauthenticated RCEvulnerability managementweb app testingwhitepaper
What happened
Rapid7 blog roundup (Mar 24–27, 2026): Metasploit received functionality and module updates—improved SMB NTLM relaying (broader client compatibility) and new modules including an auxiliary ESC/POS printer command injector that exploits CVE-2026-23767 (unauthenticated command injection against Epson-compatible networked receipt printers) and an exploit for an unauthenticated Eclipse Che machine-exec RCE. Citrix published an advisory for CVE-2026-3055, a critical out-of-bounds read (CVSS 9.3) in NetScaler ADC/Gateway that can leak memory and affects systems configured as a SAML Identity Provider
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- eb1979a7e89506ef8c5a847c49fba8570fc1e11b3172af5bd38775996b9aba1e
- Enrichment time
- 2026-03-30T07:23:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.