All issues

Search results

exploit/unix/ftp/vsftpd_234_backdoor: Default payload changed to fetch-based meterpreter, incompatible with legacy targets (Metasploitable 2 / Ubuntu 8.04)

bug

Status: Open.

#21780 In rapid7/metasploit-framework;

· ZeroSixFour opened on Aug 13, 2026

Socket#sendto removed in newer Ruby — affects dozens of call sites in lib/ and modules/

Status: Open.

#21777 In rapid7/metasploit-framework;

· bandrel opened on Aug 12, 2026

Should we support socketx0 convention for AARCH Windows/osx/Linux stagers?

suggestion-featureNew feature suggestionsNew feature suggestions

Status: Open.

#21774 In rapid7/metasploit-framework;

· bwatters-r7 opened on Aug 11, 2026

Failing vuln_attempt_registration_spec in Verify workflow due to module metadata cache error

bug

Status: Open.

Bug

#21773 In rapid7/metasploit-framework;

· dwelch-r7 opened on Aug 11, 2026

Error: No such file or directory @ rb_sysopen - /tmp/d20260809-114545-33t3v9/original/AndroidManifest.xml

questionQuestions about Metasploit UsageQuestions about Metasploit Usage

Status: Open.

#21764 In rapid7/metasploit-framework;

· aakashkumer527-ai opened on Aug 9, 2026

Error: No such file or directory @ rb_sysopen - /tmp/d20260809-114545-33t3v9/original/AndroidManifest.xml

bug

Status: Open.

#21763 In rapid7/metasploit-framework;

· aakashkumer527-ai opened on Aug 9, 2026

Stageless PHP Meterpreter breaks without setting the stdapi extension explicitly

bug

Status: Open.

#21758 In rapid7/metasploit-framework;

· cdelafuente-r7 opened on Aug 7, 2026

ENH: Auxiliary module for Flowise Authentication Bypass CVE-2025-58434

suggestion-moduleNew module suggestionsNew module suggestions

Status: Open.

#21756 In rapid7/metasploit-framework;

· rmhowe425 opened on Aug 6, 2026

ENH: Add exploit module for unauth RCE impacting Langflow versions (CVE-2026-9198)

suggestion-moduleNew module suggestionsNew module suggestions

Status: Open.

#21752 In rapid7/metasploit-framework;

· rmhowe425 opened on Aug 4, 2026

Metasploit Kerberoast Module - Database Error on String Size - New Issue because Old AutoClosed

bug

Status: Open.

#21751 In rapid7/metasploit-framework;

· Himself132 opened on Aug 4, 2026

MSSQL modules cause large CLOSE_WAIT socket accumulation and file descriptor leak

bug

Status: Open.

#21749 In rapid7/metasploit-framework;

· net2net-a opened on Aug 4, 2026

Investigate analyze_db issue deeper

bug

Status: Open.

#21741 In rapid7/metasploit-framework;

· adfoster-r7 opened on Jul 31, 2026