Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

It's Time to Upgrade Your SMB SessionThis week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users can load the module with use windows/manage/smb_to_meterpreter and specify the session number they wish to upgrade. This functionality is also available with the command sessions -u <session_id>. This work is part of an overarching effort to enable a variety of session types to be upgraded to Meterpreter when possible.New module content (3)Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code ExecutionAuthor: tmrswrrType: ExploitPull request: #21491 contributed by capture0xPath: windows/misc/peyara_remote_mouse_rceDescription: Adds an exploit module for Peyara Remote Mouse v1.0.1 unauthenticated RCE.Linux Execute CommandAuthors: bcoles bcoles@gmail.com and modexpType: Payload (Single)Pull request: #21239 contributed by bcolesPath: linux/loongarch64/execDescription: Adds a new linux/loongarch64/exec command payload.SMB to Meterpreter Upgrade via PsExecAuthor: Dean WelchType: PostPull request: #21581 contributed by dwelch-r7Path: windows/manage/smb_to_meterpreterDescription: Adds the ability to upgrade authenticated SMB sessions to Meterpreter sessions using PsExec techniques.Enhancements and features (1)#21527 from zeroSteiner - Adds authentication support to the MCP server's HTTP transport by default.Bugs fixed (2)#21618 from zeroSteiner - Fixes a crash when running the scanner/discovery/udp_sweep module on Windows environments.#21624 from adfoster-r7 - Fixes a bug with SSH session's debug …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen: Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-07-03-2026/
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.