---
title: "Metasploit Wrap Up 05/22/2026"
url: https://daily.dev/posts/metasploit-wrap-up-05-22-2026-zithpp9g7
source_url: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-22-2026
type: article
source: "Rapid7 Cybersecurity Blog"
published: 2026-05-31T07:42:21.325Z
updated: 2026-08-24T07:01:02.212Z
tags: ["security"]
reading_time: 4
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Metasploit Wrap Up 05/22/2026

**[Rapid7 Cybersecurity Blog](https://daily.dev/sources/rapid7-blog)** · 4 min read · 0 upvotes · 0 comments

## Summary

The weekly Metasploit update adds five new modules targeting critical vulnerabilities: an authentication bypass for Cisco Catalyst SD-WAN Controller (CVE-2026-20182), a zip-slip RCE for the HUSTOJ online judge platform (CVE-2026-24479), an unauthenticated RCE for Barracuda Email Security Gateway via Excel eval injection (CVE-2023-7102), a CRLF injection auth bypass leading to root RCE in cPanel/WHM (CVE-2026-41940), and a post-exploitation module for extracting and cracking Tenable Security Center credential hashes. The release also includes six enhancements (RPC improvements, Kerberoast documentation updates, Rails 8 dependency prep) and four bug fixes including Windows msfdb installation issues.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-22-2026>

## Similar posts on daily.dev

- [Metasploit Wrap-Up 05-06-2026](https://daily.dev/posts/metasploit-wrap-up-05-06-2026-hyrhopeeh) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments
- [Metasploit Wrap Up: Lot of summer shells and fit http profiles](https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security)

[View this post on daily.dev](https://daily.dev/posts/metasploit-wrap-up-05-22-2026-zithpp9g7)