Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
13 IOCs

Metasploit Wrap Up: This One Goes to Sixteen!

Rapid7
Rapid7
Published September 11, 2026Original Report

Malware Families

Excerpt

This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers! New module content (16) Elasticsearch ingest-attachment Apache Tika XFA XXE Local File Read Authors: Bourbon Offensive Security Services and Jean-Marie Bourbon Type: Auxiliary…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMetasploitVICTIMunknown
Adversary
Infrastructure
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

13 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-66516MediumScore 51/100First seen
CVECVE-2026-48558MediumScore 57/100First seen
CVECVE-2026-20929MediumScore 54/100First seen
CVECVE-2026-83548HighScore 70/100First seen
CVECVE-2026-63077MediumScore 60/100First seen
CVECVE-2026-81578HighScore 72/100First seen
CVECVE-2026-83549HighScore 70/100First seen
CVECVE-2026-20079MediumScore 59/100First seen
CVECVE-2026-82078HighScore 72/100First seen
CVECVE-2026-23744MediumScore 54/100First seen
CVECVE-2026-75604MediumScore 56/100First seen
CVECVE-2025-54988MediumScore 51/100First seen
CVECVE-2026-19295MediumScore 51/100First seen

IOC Relationship Graph

Building graph…