Back git.projectnightcrawler.dev

README.md

git.projectnightcrawler.dev • August 14, 2026

Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass.

The PoC was tested in the latest version of windows 11 25h2 (+Canary channel) and windows server 2025, the PoC also have a 100% success rate. Please note that Windows 10 (and respective server editions) are not currently supported, they are however vulnerable to ShieldBreak as well.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Windows Zero-Day 'ShieldBreak' Exploits Microsoft Defender Flaw Security researcher Nightmare Eclipse has disclosed a new zero-day vulnerability named ShieldBreak, which allows attackers to gain SYSTEM-level privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit bypasses Microsoft's previous patch for the RoguePlanet vulnerability (CVE-2026-50656), which was intended to address a local privilege escalation flaw. Nightmare Eclipse claims that the proof of concept (PoC) for ShieldBreak has a 100% success rate when tested on the latest Windows 11 version and Windows Server 2025. The exploit leverages interactions between Microsoft Defender and filesystem objects, tricking Defender into executing malicious code. This release follows a pattern of disclosures by Nightmare Eclipse, who has previously published multiple zero-day exploits against Microsoft products. Microsoft has not yet issued a patch for ShieldBreak, leaving users vulnerable until a fix is released. Experts have confirmed the exploit's functionality, raising concerns about its potential for widespread abuse. 56 sources 70

Extracted Entities

README.md

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (2)