Search results

GNU inetutils telnetd CREDENTIALS_DIRECTORY privilege escalation (CVE-2026-28372)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21063

#21063 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Open WebUI Tools API exec() Code Injection RCE (CVE-2026-0766)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21061

#21061 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

FUXA SCADA/HMI Referer Authentication Bypass to RCE (CVE-2025-69985)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21060

#21060 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Langflow custom_component eval_custom_component_code() RCE (CVE-2026-0769)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21059

#21059 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Apache HugeGraph PD Hessian2 Deserialization RCE (CVE-2025-26866)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21058

#21058 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

LaRecipe Blade SSTI Unauthenticated RCE (CVE-2025-53833)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21057

#21057 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

CyberArk Conjur Policy Factory ERB SSTI RCE (CVE-2025-49828)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21056

#21056 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Add Grafana Image Renderer arbitrary file write RCE module (CVE-2025-11539)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21055

#21055 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Add Apache Zeppelin environment variable injection RCE module (CVE-2024-31866)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21054

#21054 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Add Apache Dubbo Telnet JNDI Injection RCE module (CVE-2021-32824)

module

needs-docs

rn-modulesrelease notes for new or majorly enhanced modulesrelease notes for new or majorly enhanced modules

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21053

#21053 In rapid7/metasploit-framework;

· exploitintel opened on Mar 4, 2026

Add exploit module for Gestioip3.5.7 RCE (CVE 2024-48760)

docs

module

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21041

#21041 In rapid7/metasploit-framework;

· Odeez24 opened on Mar 2, 2026

Add Barracuda ESG Spreadsheet::ParseExcel RCE exploit (CVE-2023-7102)

module

Status: Open (in progress).

rapid7/metasploit-frameworknumber 21035

#21035 In rapid7/metasploit-framework;

· Alpenlol opened on Mar 1, 2026