Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21003, unifies Selenium Firefox and Chrome modules Unified Selenium Grid/Selenoid RCE with Firefox + Chrome auto-detection	Apr 14, 2026	msutovsky-r7
Land #20999, removes older persistence module Remove obsolete windows/local/persistence in favor of windows/persistence/registry	Mar 31, 2026	msutovsky-r7
Land #21029, adds module for Grav CMS (CVE-2025-50286) Adds exploit module for Grav CMS (CVE-2025-50286)	Mar 31, 2026	msutovsky-r7
Land #20835, adds module unauthenticated command injection Eclipse Che machine-exec (CVE-2025-12548) Add Eclipse Che machine-exec unauthenticated RCE (CVE-2025-12548)	Mar 25, 2026	msutovsky-r7

Title

Date

Author

Land #21003, unifies Selenium Firefox and Chrome modules Unified Selenium Grid/Selenoid RCE with Firefox + Chrome auto-detection

Apr 14, 2026

msutovsky-r7

Land #20999, removes older persistence module Remove obsolete windows/local/persistence in favor of windows/persistence/registry

Mar 31, 2026

msutovsky-r7

Land #21029, adds module for Grav CMS (CVE-2025-50286) Adds exploit module for Grav CMS (CVE-2025-50286)

Mar 31, 2026

msutovsky-r7

Land #20835, adds module unauthenticated command injection Eclipse Che machine-exec (CVE-2025-12548) Add Eclipse Che machine-exec unauthenticated RCE (CVE-2025-12548)

Mar 25, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Remove the encrypted shell payload and libs	rn-payload-enhancement	zeroSteiner
Improve the fortinet_fortiweb_create_admin aux module check method	rn-fix	sfewer-r7
Improve auxiliary check code messages	additional-testing-required	adfoster-r7
Fix sign-extension formula in marshal validator	rn-no-release-notes	bwatters-r7
Remove IP requirements from markdown files	rn-no-release-notes	adfoster-r7
bump postgres from 9.6 to 14.19 for gem tests		dwelch-r7

Name

Labels

Author

Remove the encrypted shell payload and libs

rn-payload-enhancement

zeroSteiner

Improve the fortinet_fortiweb_create_admin aux module check method

rn-fix

sfewer-r7

Improve auxiliary check code messages

additional-testing-required

adfoster-r7

Fix sign-extension formula in marshal validator

rn-no-release-notes

bwatters-r7

Remove IP requirements from markdown files

rn-no-release-notes

adfoster-r7

bump postgres from 9.6 to 14.19 for gem tests

dwelch-r7

Create a Pull Request

Recent Blog Posts

Fri Apr 17 2026

Metasploit Wrap-Up 04/17/2026

Happy Friday - Seven New Metasploit ModulesWe’re happy to announce that Metasploit Framework had a big week, landing seven new modules alongside various bug fixes and enhancements. This week’s highlights include RCE modules t...

Fri Apr 10 2026

Metasploit Wrap-Up 04/10/2026

Speedup Improvements of MSFVenom & New ModulesThis week, we have added new modules to Metasploit Framework targeting Cisco Catalyst SD-WAN controllers and osTicket as well as updates and improvements to Windows service-for-us...

Fri Apr 03 2026

Metasploit Wrap-Up 04/03/2026

Additional Adapters and More ModulesThis week, we added a whole new bunch of HTTP/HTTPS-based CMD payloads for X64 and X86 versions of Windows. The additional breadth of selectable payloads and delivery techniques allows user...

View More Metasploit Blog Posts