ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Product

Metasploit Framework

1 mentions in 7 days · 8 in 30 days · 8 total · first seen · last

Search everything

Timeline

get the module working against several of the 12.4.3 versions

A Metasploit Framework exploit module was updated to work reliably against several 12.4.3 software versions.

A commit to the Rapid7 Metasploit Framework repository adjusts an existing exploit module so it functions against several 12.4.3 version targets. The change is described as getting the module working against those versions, indicating reliability or compatibility improvements. The commit text does not describe a new vulnerability, exploitation campaign, or affected victims.

Metasploit Framework commits · 6d agoTools1

automatic module_metadata_base.json update

Automated Metasploit Framework commit updating module_metadata_base.json to reflect newly added or modified exploit modules.

An automated commit updated module_metadata_base.json in the rapid7/metasploit-framework repository. The routine maintenance change reflects newly added or modified Metasploit modules and carries no standalone security significance.

Metasploit Framework commits · 12d agoTools1

automatic module_metadata_base.json update

Metasploit Framework automatically updates its module metadata JSON in routine maintenance commit.

The Metasploit Framework repository received an automatic update to module_metadata_base.json, the metadata file that tracks module information. No specific new vulnerability, exploit module, or feature is described in the commit message. This is routine repository maintenance rather than a notable security event.

Metasploit Framework commits · 12d agoTools

automatic module_metadata_base.json update

Metasploit Framework's automated pipeline refreshed its module metadata file, a routine repository maintenance commit introducing no new modules or exploits.

An automated Metasploit Framework commit updated module_metadata_base.json, the metadata database consumed by module tooling. The change is routine maintenance and contains no new exploit modules or vulnerability content.

Metasploit Framework commits · 12d agoTools1

automatic module_metadata_base.json update

Metasploit Framework pushed an automated update to its module_metadata_base.json module metadata file.

This repository commit is an automated update to the Metasploit Framework's module_metadata_base.json file. No new modules, vulnerabilities or exploit changes are described in the commit message.

Metasploit Framework commits · 13d agoTools

automatic module_metadata_base.json update

Routine automated Metasploit Framework commit updating module metadata, with no disclosed vulnerability or exploitation activity.

The Metasploit Framework repository received an automatic update to its module_metadata_base.json file. The commit text contains no vulnerability details, CVE references, or new exploit modules. This is routine maintenance activity on the open-source penetration testing framework.

Metasploit Framework commits · 14d agoTools

SimpleHelp OpenID Connect Auth Bypass to RCE [CVE-2026-48558]

Metasploit adds a module chaining SimpleHelp OpenID Connect authentication bypass to remote code execution, tracked as CVE-2026-48558.

A commit to the Rapid7 Metasploit Framework (dee04cdb) adds an exploit module for CVE-2026-48558, an OpenID Connect authentication bypass in SimpleHelp that can be escalated to remote code execution. SimpleHelp is widely deployed remote access and remote support software, making the auth bypass a serious exposure for exposed deployments. The commit provides public exploit code but the listing does not state observed exploitation.

Metasploit Framework commits · 14d agoExploit / PoCCVE-2026-485581

Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Rapid7's weekly Metasploit roundup highlights newly added exploit modules, payloads, and scanners in the Metasploit Framework.

Rapid7 published its weekly Metasploit Wrap Up summarizing community contributions to the Metasploit Framework, including new exploit modules, payloads, and scanners. No article text was available; the post serves as a routine digest for practitioners tracking newly packaged modules.

Rapid7 Blog · 18d agoTools

Related CVEs

  • CVE-2026-485589.564%
    Authentication Bypass via Forged OIDC Tokens in SimpleHelp
    CVE-2026-48558 is an authentication bypass (CWE-347, improper verification of cryptographic signature) in the SimpleHelp remote access/support platform's OpenID Connect (OIDC) login flow, where submitted identity tokens are accepted without verifying their signature. It is triggered when OIDC authentication is configured: a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims and obtain a fully authenticated technician session, and in some configurations this also bypasses multi-factor authentication. Related reporting describes a path from this bypass to remote code execution. Only SimpleHelp deployments using OIDC-based (e.g., SSO) authentication are affected; deployments relying on local SimpleHelp accounts are not described as affected. The flaw was added to CISA's Known Exploited Vulnerabilities catalog on 2026-06-29, confirming exploitation in the wild, with a 30% EPSS probability of exploitation within 30 days and no public proof-of-concept known.
    · SimpleHelp KEVmoderate

Appears with

vendor Rapid7 7organization Rapid7 2vendor Metasploit 2product SimpleHelp 1vendor SimpleHelp 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.