Metasploit Wrap Up 05/22/2026

Rapid7 blog roundup (mid‑May 2026) highlighting multiple high‑impact vulnerabilities and new Metasploit modules. Key issues include a critical authentication bypass in Cisco Catalyst SD‑WAN Controller (CVE‑2026‑20182) that allows remote unauthenticated actors to become authenticated peers and perform privileged operations, a Palo Alto PAN‑OS signature verification/authentication bypass (CVE‑2026‑0265, rated High), and several other RCE/authentication bypass/privilege‑escalation flaws (HUSTOJ zip‑slip RCE, Barracuda Email Security eval() in Excel, cPanel/WHM CRLF→root escalation). Metasploit/po