Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
75
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 19, 2026
- Last mentionedSep 25, 2026
Timeline
6 articles · newest firstUpdate modules/exploits/multi/persistence/kate_plugin.rb
Metasploit updated its Kate editor plugin persistence module in a commit co-authored by Diego Ledda.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
Another Metasploit commit updates the same Kate plugin persistence module with no added details.
12
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit commit updates the Kate editor plugin persistence module without new vulnerability details.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit recorded another update to the Kate plugin persistence module without publishing exploit details.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
A second Metasploit commit updates the Kate plugin persistence module, with no technical details disclosed.
14
Related CVEs
by mentions- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-18729<1%8.8Authenticated RCE via Code Injection in IBM Langflow OSS 1.0.0–1.11.1
- CVE-2026-209291%7.5Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network
Appears with
- Rapid7organization · 6
- Rapid7vendor · 6
- Metasploit Frameworkproduct · 5
- Microsoftvendor · 1
- GitLabvendor · 1
- Windowsproduct · 1
- Metasploitproduct · 1
- GitLabproduct · 1
- Langflowproduct · 1
- ZoomEyeproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.