Metasploit Wrap Up: Lot of summer shells and fit http profiles

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Betroffene Kennungen: CVE-2025-49132, CVE-2026-15409, CVE-2026-22594, CVE-2026-27760, CVE-2026-29053. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of the summer with the new http malleable profiles, MCP functionality and linux multi fetch payloads (more details on the [official 6.5 release blog post](https://www.rapid7.com/blog/post/pt-metasploit-framework-6-5-released/)!). Windows on ARM confirm to be the new first-class citizenship thanks to brand-new AArch64 reverse-TCP shells (both inline and staged), so your Snapdragon boxes can join the party too. Last but not least, an important message: *Nyan Nyan Nyan Nyan Nyan Nyan.*New module content (13)Ray Dashboard Logs API Path TraversalAuthor: Richard Howe <rhowe425>Type: AuxiliaryPull request: #21681 contributed by rmhowe425Path: `gather/ray_dashboard_logs_api_path_traversal`Description: This adds an auxiliary module that leverages a path traversal vulnerability in Ray to list the contents of local directories. There is currently no CVE assigned to this vulnerability. Issuance is pending with MITRE. Pterodactyl Panel CVE-2025-49132 Remote Code ExecutionAuthors: 0xtensho and jheysel-r7Type: ExploitPull request: #21452 contributed by jheysel-r7Path: `linux/http/pterodactyl_locales_locale_json`AttackerKB reference: CVE-2025-49132Description: This adds a module which exploits a …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen (CVE-2025-49132, CVE-2026-15409, CVE-2026-22594, CVE-2026-27760, CVE-2026-29053): Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.