Metasploit updates SMB and PostgreSQL auxiliary scanners

Metasploit updated its CVE-2000-0979 SMB scanner and later its PostgreSQL login scanner; sources disagree on the SMB commit hash, and no exploitation is described.

On 1 October 2026, Metasploit Framework commits updated the existing auxiliary scanner at modules/auxiliary/scanner/smb/cve_2000_0979.rb, which covers the year-2000 SMB issue CVE-2000-0979. The change was co-authored by Christophe De La Fuente. Three of the four reports attribute those commits to Rapid7, but they disagree on the commit identifier, citing b5c94ba, ee69741, and 1b458c3, while one report gives no hash. None of those messages describe a new vulnerability, a proof of concept, or observed exploitation. On 7 October 2026, a separate Rapid7 commit updated modules/auxiliary/scanner/postgres/postgres_login.rb, the auxiliary module used to test PostgreSQL logins, co-authored by cgranleese-r7, with no CVE, exploit details, or described functional change.