Cyberkendra Zero-Day Exploit Discovered in Avast Antivirus
Article Content
- •PrettyPrague exploit allows full local compromise via Avast Antivirus.
- •No CVE or patch currently exists for the vulnerability.
- •Gen Digital has not responded to the exploit's disclosure.
A proof-of-concept exploit named PrettyPrague has been released for a privilege escalation vulnerability in Avast Antivirus, allowing attackers to dump the Windows Security Account Manager (SAM) database and execute commands as NT AUTHORITY\SYSTEM. The exploit affects all versions of Avast Antivirus and potentially other Gen Digital products, including AVG and Norton. The researcher, known as Chaotic Eclipse or MSNightmare, published the exploit on August 30, 2026, and it quickly gained traction on GitHub, reaching 125 stars and 31 forks within 24 hours. Gen Digital has not publicly acknowledged the vulnerability or provided any patches or workarounds. Security professionals are advised to monitor for unusual activity related to the SAM registry hive and rotate local account credentials as a precaution.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Avast and CVE-2026-65643 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…