Metasploit Wrap Up: This One Goes to Sixteen!
Rapid7, Friday, September 11th, 2026
Sixteen new modules including ten exploits, five of them for CISA Known Exploited Vulnerabilities entries.
This Metasploit release adds sixteen new modules, ten of them exploits and five targeting vulnerabilities on CISA's Known Exploited Vulnerabilities list. Covered products include Cisco Secure Firewall Management Center, SonicWall SMA1000, JetBrains TeamCity, PaperCut, Langflow and MCPJam Inspector.
Notable additions include credential-free RCE exploits for enterprise software, two Windows registry persistence techniques, a scanner for identifying Metasploit reverse handlers, and auxiliary modules for Linux sandbox detection and Kerberos relay against AD Certificate Services. Four bugs were fixed.