THREAT OPS › Threat News › Metasploit Wrap Up: Lot of summer shells and fit http profiles
Metasploit Wrap Up: Lot of summer shells and fit http profiles
<p><span style="font-size: undefined;">This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300)
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-46300cve
- CVE-2025-49132cve
- CVE-2026-15409cve
- CVE-2026-22594cve
- CVE-2026-29053cve
- CVE-2026-48907cve
- CVE-2026-33017cve
- CVE-2026-27760cve
- CVE-2026-60137cve
- CVE-2026-63030cve
- CVE-2026-3891cve
- CVE-2026-52806cve
- https://attackerkb.com/search?q=CVE-2025-49132&referrer=blogurl
- https://attackerkb.com/search?q=CVE-2026-15409&referrer=blogurl
- https://docs.metasploit.com/url
- 2.9.99.4ipv4
- images.contentstack.iodomain
- 2fgithub.comdomain
- 2fwww.rapid7.comdomain