Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20841, adds persistence module for Windows feature active setup active setup persistence	Feb 20, 2026	msutovsky-r7
Land #20976, adds module for StoryChief WP plugin (CVE-2025-7441) Add StoryChief WordPress 1.0.42 unauthenticated RCE module (CVE-2025-7441)	Feb 19, 2026	msutovsky-r7
Land #20798, adds module for FreeBSD rtsold/rtsol command injection (CVE-2025-14558) Add module for rtsold/rtsol DNSSL Command Injection (CVE-2025-14558)	Feb 13, 2026	msutovsky-r7
Land #20834, fixes NoMethodError in teamviewer_password post module Fix teamviewer_password module NoMethodError	Feb 04, 2026	msutovsky-r7
Land #19821, adds Burpsuite persistence module Burp extension persistence	Jan 22, 2026	msutovsky-r7

Title

Date

Author

Land #20841, adds persistence module for Windows feature active setup active setup persistence

Feb 20, 2026

msutovsky-r7

Land #20976, adds module for StoryChief WP plugin (CVE-2025-7441) Add StoryChief WordPress 1.0.42 unauthenticated RCE module (CVE-2025-7441)

Feb 19, 2026

msutovsky-r7

Land #20798, adds module for FreeBSD rtsold/rtsol command injection (CVE-2025-14558) Add module for rtsold/rtsol DNSSL Command Injection (CVE-2025-14558)

Feb 13, 2026

msutovsky-r7

Land #20834, fixes NoMethodError in teamviewer_password post module Fix teamviewer_password module NoMethodError

Feb 04, 2026

msutovsky-r7

Land #19821, adds Burpsuite persistence module Burp extension persistence

Jan 22, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Revert "Report more vulns when importing acunetix XML file"	rn-no-release-notes	sjanusz-r7
Remove encoding issue in source file	rn-no-release-notes	adfoster-r7
Add check method to ms17-010 scanner module	rn-enhancement	adfoster-r7
Add StoryChief WordPress 1.0.42 unauthenticated RCE module (CVE-2025-7441)	module , docs , rn-modules	Nayeraneru
Fix false positives on lg simple editor check methods	rn-fix	adfoster-r7
Report more vulns when importing acunetix XML file	rn-enhancement	sjanusz-r7

Name

Labels

Author

Revert "Report more vulns when importing acunetix XML file"

rn-no-release-notes

sjanusz-r7

Remove encoding issue in source file

rn-no-release-notes

adfoster-r7

Add check method to ms17-010 scanner module

rn-enhancement

adfoster-r7

Add StoryChief WordPress 1.0.42 unauthenticated RCE module (CVE-2025-7441)

module , docs , rn-modules

Nayeraneru

Fix false positives on lg simple editor check methods

rn-fix

adfoster-r7

Report more vulns when importing acunetix XML file

rn-enhancement

sjanusz-r7

Create a Pull Request

Recent Blog Posts

Fri Feb 20 2026

Metasploit Wrap-Up 02/20/2026

Hacking Churches and Backdooring EmacsThis release packs some solid exploit module additions! Two new unauthenticated RCE modules are a major win: the StoryChief WordPress plugin exploit (CVE-2025-7441) targets a webhook vali...

Fri Feb 13 2026

Metasploit Wrap-Up 02/13/2026

SolarWinds Web Help DeskOur very own sfewer-r7 has developed an exploit module for the SolarWinds Web Help Desk vulnerabilities CVE-2025-40536 and CVE-2025-40551. On successful exploitation the session will be as running as N...

Fri Feb 06 2026

Metasploit Wrap-Up 02/06/2026

Google Summer of Code 2026Our very own Jack Heysel has added some documentation which outlines the Metasploit Framework project ideas for GSoC 2026. For anyone interested in applying please see GSoC-How-To-Apply documentation...

View More Metasploit Blog Posts