Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19821, adds Burpsuite persistence module Burp extension persistence	Jan 22, 2026	msutovsky-r7
Land #20806, adds module for unauthenticated command injection in Control Web Panel API (CVE-2025-67888) Adds module for Control Web Panel API Command Injection (CVE-2025-67888)	Jan 14, 2026	msutovsky-r7
Land #20810, adds module for authenticated RCE in n8n (CVE-2025-68613) Adds module for n8n workflow expression RCE (CVE-2025-68613)	Jan 13, 2026	msutovsky-r7
Land #20796, moves udev module into persistence category update udev to persistence mixin	Jan 09, 2026	msutovsky-r7
Land #20811, adds module for Prison Management System 1.0 RCE (CVE-2024-48594) Add Prison Management System 1.0 auth RCE (CVE-2024-48594)	Jan 08, 2026	msutovsky-r7
Land #20700, adds module for Taiga.io RCE (CVE-2025-62368) Adds exploit module for authenticated deserialization vulnerability in Taiga.io (CVE-2025-62368)	Jan 07, 2026	msutovsky-r7

Title

Date

Author

Land #19821, adds Burpsuite persistence module Burp extension persistence

Jan 22, 2026

msutovsky-r7

Land #20806, adds module for unauthenticated command injection in Control Web Panel API (CVE-2025-67888) Adds module for Control Web Panel API Command Injection (CVE-2025-67888)

Jan 14, 2026

msutovsky-r7

Land #20810, adds module for authenticated RCE in n8n (CVE-2025-68613) Adds module for n8n workflow expression RCE (CVE-2025-68613)

Jan 13, 2026

msutovsky-r7

Land #20796, moves udev module into persistence category update udev to persistence mixin

Jan 09, 2026

msutovsky-r7

Land #20811, adds module for Prison Management System 1.0 RCE (CVE-2024-48594) Add Prison Management System 1.0 auth RCE (CVE-2024-48594)

Jan 08, 2026

msutovsky-r7

Land #20700, adds module for Taiga.io RCE (CVE-2025-62368) Adds exploit module for authenticated deserialization vulnerability in Taiga.io (CVE-2025-62368)

Jan 07, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Align login scanner APIs	rn-fix	adfoster-r7
Update license year	docs , easy , rn-no-release-notes	adfoster-r7
Add the action file to add the PRs to the project	rn-no-release-notes	smcintyre-r7
Add the action file to add the PRs to the project		zeroSteiner
Handle SSH login success when shell creation fails	module , bug , rn-fix	rudraditya21
add CVE reference to Continuum exploit	rn-no-release-notes	raboof

Name

Labels

Author

Align login scanner APIs

rn-fix

adfoster-r7

Update license year

docs , easy , rn-no-release-notes

adfoster-r7

Add the action file to add the PRs to the project

rn-no-release-notes

smcintyre-r7

Add the action file to add the PRs to the project

zeroSteiner

Handle SSH login success when shell creation fails

module , bug , rn-fix

rudraditya21

add CVE reference to Continuum exploit

rn-no-release-notes

raboof

Create a Pull Request

Recent Blog Posts

Fri Jan 30 2026

Metasploit Wrap-Up 01/30/2026

FreeBPX Content GaloreThis week brings 3 new pieces of module content for targeting FreePBX. All three chain multiple vulnerabilities together, starting with CVE-2025-66039. This initial vulnerability allows unauthenticated u...

Fri Jan 23 2026

Metasploit Wrap-Up 01/23/2026

Oracle E-Business Suite Unauth RCEThis week, we are pleased to announce the addition of a module that exploits CVE-2025-61882, a pre-authentication remote code execution vulnerability in Oracle E-Business Suite versions 12.2....

Fri Jan 16 2026

Metasploit Wrap-Up 01/16/2026

Persistence, dMSA Abuse & RCE GoodiesThis week, we have received a lot of contributions from the community, such as h00die, Chocapikk and countless others, which is greatly appreciated. This week’s modules and improvements in...

View More Metasploit Blog Posts