Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21017, adds module for SSTI in Tactical RMM (CVE-2025-69516) Add Tactical RMM Jinja2 SSTI RCE module (CVE-2025-69516)	Mar 05, 2026	msutovsky-r7
Land #20852, exposes encoder options for exploit and payloads Expose encoder options	Mar 04, 2026	msutovsky-r7
Land #20951, moves default payload into more consistent default options Moves default payload into default options in Remote for Mac module	Feb 25, 2026	msutovsky-r7
Land #20978, adds module BeyondTrust unauth command injection (CVE-2026-1731) Add CVE-2026-1731 support and modernize targets for BeyondTrust PRA/R…	Feb 25, 2026	msutovsky-r7
Land #21006, adds module for Ollama path traversal RCE (CVE-2024-37032) Add Ollama path traversal RCE module (CVE-2024-37032)	Feb 25, 2026	msutovsky-r7
Land #20819, adds WSL startup folder persistence module wsl startup folder persistence	Feb 24, 2026	msutovsky-r7

Title

Date

Author

Land #21017, adds module for SSTI in Tactical RMM (CVE-2025-69516) Add Tactical RMM Jinja2 SSTI RCE module (CVE-2025-69516)

Mar 05, 2026

msutovsky-r7

Land #20852, exposes encoder options for exploit and payloads Expose encoder options

Mar 04, 2026

msutovsky-r7

Land #20951, moves default payload into more consistent default options Moves default payload into default options in Remote for Mac module

Feb 25, 2026

msutovsky-r7

Land #20978, adds module BeyondTrust unauth command injection (CVE-2026-1731) Add CVE-2026-1731 support and modernize targets for BeyondTrust PRA/R…

Feb 25, 2026

msutovsky-r7

Land #21006, adds module for Ollama path traversal RCE (CVE-2024-37032) Add Ollama path traversal RCE module (CVE-2024-37032)

Feb 25, 2026

msutovsky-r7

Land #20819, adds WSL startup folder persistence module wsl startup folder persistence

Feb 24, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Kibana Integration Assistant js-yaml !!js/function deserialization RCE (CVE-2024-37288)		exploitintel
MetaGPT deserialize_message() Pickle Deserialization RCE (CVE-2026-0760)	module , needs-docs , rn-modules	exploitintel
Ensure nessus icmp vulns are registered	rn-no-release-notes	adfoster-r7
Fix nessus service import crash	rn-fix	adfoster-r7
Fix broken module url references	rn-no-release-notes	adfoster-r7
Cookie Jar Documentain Fix	needs-unique-branch	svm1048

Name

Labels

Author

Kibana Integration Assistant js-yaml !!js/function deserialization RCE (CVE-2024-37288)

exploitintel

MetaGPT deserialize_message() Pickle Deserialization RCE (CVE-2026-0760)

module , needs-docs , rn-modules

exploitintel

Ensure nessus icmp vulns are registered

rn-no-release-notes

adfoster-r7

Fix nessus service import crash

rn-fix

adfoster-r7

Fix broken module url references

rn-no-release-notes

adfoster-r7

Cookie Jar Documentain Fix

needs-unique-branch

svm1048

Create a Pull Request

Recent Blog Posts

Fri Mar 06 2026

Metasploit Wrap-Up 03/06/2026

Encoder exposed!Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new RCE toys in the box (Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit). Still, th...

Fri Feb 27 2026

Metasploit Wrap-Up 02/27/2026

No Prob-ollamaThis release brings some serious firepower with multiple new exploit modules and critical vulnerability support! The standout additions are the Ollama path traversal RCE (CVE-2024-37032), a sophisticated exploit...

Fri Feb 20 2026

Metasploit Wrap-Up 02/20/2026

Hacking Churches and Backdooring EmacsThis release packs some solid exploit module additions! Two new unauthenticated RCE modules are a major win: the StoryChief WordPress plugin exploit (CVE-2025-7441) targets a webhook vali...

View More Metasploit Blog Posts