Metasploit adds authenticated Portainer Docker API root RCE
The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.
28
Product
Metasploit Framework
- Mentions · 7d4
- Mentions · 30d26
- All mentions41
- First seenAug 28, 2026
- Last mentioned1d ago
Timeline
41 articles · newest firstMetasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
46
Metasploit Framework commit updates a module and its docs
The public commit message names neither the module nor any target or vulnerability.
12
Metasploit varnish_cli_login docs aligned with the module
The commit only updates documentation output so it matches the existing varnish_cli_login module.
12
Metasploit updates Apache Solr version scanner docs
The commit only changes the scanner module’s markdown file; no code or flaw details appear in the snippet.
12
Metasploit updates Apache Solr version scanner documentation
The commit only refreshes module documentation and does not add an exploit or a new module.
14
Metasploit commit removes agent module examples, updates AGENTS.md
The change is documentation and example cleanup, not a new exploit or module release.
8
Metasploit updates Apache Solr version scanner documentation
The commit only revises the auxiliary HTTP scanner module’s markdown, with no exploit or vulnerability details in the snippet.
12
Metasploit adds specs for the mkdir post API
Pull request 20944 adds tests so mkdir behaves consistently across session types, with no vulnerability disclosed.
10
Addresses some false positives in several modules
Metasploit commit reduces false positives across several modules.
18
Clarify Grafana CVE-2024-9264 version handling
A Metasploit commit clarifies version handling for the Grafana CVE-2024-9264 module.
18
Update modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb
Metasploit updated its Langflow unauthenticated RCE module for CVE-2026-0769.
48
Update modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb
Metasploit updated its authenticated RCE module for Langflow flaw CVE-2026-7873.
48
Update modules/auxiliary/scanner/postgres/postgres_login.rb
Rapid7 updated Metasploit's PostgreSQL login scanner module, with no vulnerability details disclosed.
14
Update encoder and exploit templates to enforce fail-loud architectur…
Rapid7 updated Metasploit encoder and exploit templates to fail loudly and standardize rank placeholders.
18
Ensure AutoCheck prepend is last in module templates and update archi…
Metasploit templates now place AutoCheck prepend last and update architecture handling.
15
Update module templates to include placeholders for DisclosureDate an…
Metasploit templates now include DisclosureDate and SessionTypes placeholders plus encoder and exploit docs.
16
Update module documentation to clarify usage instructions for encoder…
Metasploit documentation clarifies usage instructions for encoders and NOP generators.
12
Enhance documentation in module templates by adding links to relevant…
A Metasploit commit adds documentation links for Rank, CheckCode, and Notes template placeholders.
14
Update module templates to enforce proper platform placeholders and m…
Metasploit commit updates module templates to enforce platform placeholders and mixin ordering.
14
Refactor module templates to use MsfModuleGenerator for string interp…
Metasploit refactors module templates to use MsfModuleGenerator for string interpolation.
14
Add generators for module scaffolding and enablement for Users/Agents
Metasploit adds generators for module scaffolding and enablement for users and agents.
16
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit commit 1b458c3 updates the auxiliary SMB scanner for CVE-2000-0979.
12
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit commit ee69741 revises the auxiliary SMB scanner module for CVE-2000-0979.
12
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit commit b5c94ba updates the CVE-2000-0979 SMB auxiliary scanner module.
12
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit updated its auxiliary SMB scanner module for historical flaw CVE-2000-0979.
12
Update modules/exploits/multi/persistence/kate_plugin.rb
Another Metasploit commit updates the same Kate plugin persistence module with no added details.
12
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit updated its Kate editor plugin persistence module in a commit co-authored by Diego Ledda.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit commit updates the Kate editor plugin persistence module without new vulnerability details.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
A second Metasploit commit updates the Kate plugin persistence module, with no technical details disclosed.
14
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit recorded another update to the Kate plugin persistence module without publishing exploit details.
14
Refactor GitLab file read module and update documentation
Metasploit Framework commit refactors and updates documentation for an existing GitLab file read module.
20
Add GitLab WorkHorse File Read Auxiliary Module (CVE-2026-85706)
Metasploit adds a new module to exploit CVE-2026-85706, a file read vulnerability in GitLab WorkHorse.
45
get the module working against several of the 12.4.3 versions
A Metasploit Framework exploit module was updated to work reliably against several 12.4.3 software versions.
12
automatic module_metadata_base.json update
Automated Metasploit Framework commit updating module_metadata_base.json to reflect newly added or modified exploit modules.
4
automatic module_metadata_base.json update
Metasploit Framework automatically updates its module metadata JSON in routine maintenance commit.
15
automatic module_metadata_base.json update
Metasploit Framework's automated pipeline refreshed its module metadata file, a routine repository maintenance commit introducing no new modules or exploits.
5
automatic module_metadata_base.json update
Metasploit Framework pushed an automated update to its module_metadata_base.json module metadata file.
5
automatic module_metadata_base.json update
Routine automated Metasploit Framework commit updating module metadata, with no disclosed vulnerability or exploitation activity.
14
SimpleHelp OpenID Connect Auth Bypass to RCE [CVE-2026-48558]
Metasploit adds a module chaining SimpleHelp OpenID Connect authentication bypass to remote code execution, tracked as CVE-2026-48558.
48
Related CVEs
by mentions- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-4855878%9.5Authentication Bypass via Forged OIDC Tokens in SimpleHelp
- CVE-2025-5843476%9.8Unauthenticated Account Takeover via Password Reset Token Leak in Flowise
- CVE-2024-926495%9.4Authenticated Command Injection & Local File Inclusion in Grafana SQL Expressions
Appears with
- Rapid7vendor · 37
- Rapid7organization · 27
- Kateproduct · 5
- Apache Solrproduct · 3
- Langflowproduct · 2
- Metasploitvendor · 2
- Metasploitorganization · 2
- SimpleHelpproduct · 1
- Grafanaproduct · 1
- GitLabproduct · 1
- Portainervendor · 1
- Flowiseproduct · 1
- Grafanavendor · 1
- GitLab WorkHorseproduct · 1
- PostgreSQLproduct · 1
- SimpleHelpvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.