Metasploit adds Langflow, OpenCTI, Grafana and MongoDB modules
Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.
66
Product
Metasploit
- Mentions · 7d0
- Mentions · 30d4
- All mentions13
- First seenAug 14, 2026
- Last mentioned8d ago
Timeline
13 articles · newest firstHow Multi-Campus Universities can Build a more Connected Security Program
Rapid7 says multi-campus universities should share security visibility and response while keeping campus data separate.
22
Decepticon – Autonomous Red Team Agent that Integrates Claude and Codex
Open-source Decepticon red team agent links Claude Code and Codex to a LangGraph runtime for scoped attack-path testing.
44
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
52
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
75
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
GreyNoise and Blackpoint tracked an AI-assisted actor using OpenAI Codex and DeepSeek agents to exploit PaperCut flaws across 440+ instances in 48 countries.
76
Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb
Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.
18
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Attackers exploit newly disclosed PaperCut auth bypass CVE-2026-81578 and RCE CVE-2026-82078 to steal credentials from schools and universities in the US and Europe.
74
automatic module_metadata_base.json update
Routine automated Metasploit Framework commit updates module_metadata_base.json with new module metadata.
15
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
Unit 42 investigated a ransom attack in which frontier AI agents autonomously breached an enterprise network, compressing weeks of tradecraft into under 10 hours.
80
add a DefangedMode advanced options as teh exploit modifies the targe…
A Metasploit Framework commit adds a DefangedMode advanced option to an exploit module that modifies the target host configuration.
12
automatic module_metadata_base.json update
Automated Metasploit Framework commit refreshes module_metadata_base.json with no new exploit content or vulnerability details.
10
Metasploit Wrap Up: Lot of summer shells and fit http profiles
Metasploit 6.5 ships 13 new modules including RCEs for SonicWall SMA1000, Ghost CMS, Joomla JCE and Langflow, plus a Linux kernel LPE.
32
Related CVEs
by mentions- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-077063%9.8Unauthenticated Remote Code Execution in Langflow validate Endpoint
- CVE-2026-4227191%8.7Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
- CVE-2026-7873<1%9.9IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling…
- CVE-2024-926495%9.4Authenticated Command Injection & Local File Inclusion in Grafana SQL Expressions
- CVE-2026-43503<1%8.8Linux kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers…
- CVE-2026-209291%7.5Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network
- CVE-2026-39980<1%7.2OpenCTI: The safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary…
- File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers…
Appears with
- Rapid7vendor · 8
- Rapid7organization · 7
- Langflowproduct · 4
- GitLabproduct · 2
- OpenAIvendor · 2
- OpenCTIproduct · 2
- PaperCutvendor · 2
- SonicWallvendor · 1
- Rubeusproduct · 1
- Pterodactyl Panelproduct · 1
- 4gaBoardsproduct · 1
- BerriAIvendor · 1
- Mimikatzproduct · 1
- Meterpreterproduct · 1
- Project Sonarproduct · 1
- N-centralproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.