Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7, Friday, October 9th, 2026
This week's Metasploit release adds 12 modules, including LLM-targeting scanners, Linux LPEs and an N-able N-central RCE.
Rapid7's Metasploit wrap-up covers new modules, including four targeting LLM infrastructure, two Linux local privilege escalations and 12 Windows AARCH64 fetch payloads.
Highlights include a vLLM multimodal heap-address leak scanner (CVE-2026-22778), an unauthenticated N-able N-central RCE exploit (CVE-2026-86218), a snap-confine race condition (CVE-2026-3888), the DirtyClone LPE (CVE-2026-43503) and a dizqueTV RCE.
The release also adds a scanner for the 26-year-old CVE-2000-0979 SMB share password flaw.