CVE-2026-50656

ation of remediations as a trailing indicator. SharePoint: critical auth bypass by Rapid7 Today sees the publication of CVE-2026-55040 , a critical authentication bypass in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer , and published today in coordination with Microsoft, this vulnerability is the first i

erica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation A Hacker Claims 35 GB of Accenture Source Code. The Company

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

to as RoguePlanet continuing the string of Microsoft Defender flaws that have been identified. RoguePlanet, tracked as CVE-2026-50656 , is a race condition privilege escalation vulnerability. The POC code the researcher posted on GitHub can result in a System privilege shell running on the compromised system. CISA has announced the previously reported

ortion crew hijacks Microsoft 365 accounts via fake passkey setup Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) Report: How to Implement a Continuous Offensive Security Testing Program Resources Download: Secure Foundations for AI Workloads on AWS Download: Automating Pentest Delivery Guide CIS Benchmarks March 2026 Update Don't

ortion crew hijacks Microsoft 365 accounts via fake passkey setup Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) Report: How to Implement a Continuous Offensive Security Testing Program Resources Download: Secure Foundations for AI Workloads on AWS Download: Automating Pentest Delivery Guide CIS Benchmarks March 2026 Update Don't

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

t issued an out-of-band patch for RoguePlanet , an elevation-of-privilege vulnerability in Windows Defender, tracked as CVE-2026-50656. The high-severity flaw, which received a 7.8 CVSS score from Microsoft, could allow an attacker to escalate privileges on a Windows device from a basic user to the highest SYSTEM-level access, which would give them com

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

pse after months of public sparring over the company's handling of vulnerability reports. The vulnerability, tracked as CVE-2026-50656, was addressed through an update to the Microsoft Malware Protection Engine rather than via its monthly Patch Tuesday bundle. Microsoft said customers should ensure they're running the latest engine version to receive t

Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before file access, affects Windows 10

The RoguePlanet zero-day is now fixed in Microsoft Defender. Here's how to make sure your system is protected.

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update. The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek .

Microsoft fixed RoguePlanet (CVE-2026-50656), a Defender flaw allowing local attackers to gain higher privileges through the Malware Protection Engine. Microsoft released security updates for RoguePlanet, a vulnerability tracked as CVE-2026-50656 (CVSS score of 7

lnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine ("mpengine.dll"), which provides scanning, detection, and cleaning capabilities for its antivirus and

fender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday. The flaw (tracked as CVE-2026-50656 ) was disclosed by a security researcher using the "Nightmare Eclipse" handle as part of an ongoing dispute with Microsoft over the company's bug bounty and vulnerability disclosure practices. They also shared a proof-o

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

ica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack | Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) | Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes | Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation | A Hacker Claims 35 GB of Accenture Source Code. The C

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A hardware neural network backdoor that hides in plain sight Deep learning systems on edge devices often rely on third-party-designed FPGAs and ASICs for performance and efficiency, creating supply chain risks. Researchers from the University of Tennessee and the University of Florida developed HAMLOCK, a backdoor attack that splits malicious functionality between hardware and software, making detection more difficult. Onspring … More →

Microsoft says it’s working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.

Microsoft confirmed the RoguePlanet Defender zero-day (CVE-2026-50656), a privilege escalation flaw, and is developing a security patch. Microsoft has acknowledged the RoguePlanet zero-day affecting Microsoft Defender, tracked as CVE-2026-50656 (CVSS score of 7.8). The vulnerability allows privilege escalation through the Microsoft Malware Protection Engine. The company stated it is aware of the issue and is […]

Microsoft has acknowledged the local elevation of privilege issue in Microsoft Defender that can be triggered via the “RoguePlanet” exploit, and is “working to provide a high quality security update that addresses this vulnerability.” The vulnerability, which has been assigned the CVE-2026-50656 identifier, stems from improper link resolution before file access, and can be exploited in low complexity attacks by authenticated attackers, with no user interaction required. Zero-day exploits by Nightmare Eclipse RoguePlanet is one … More →

The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges.

No excerpt available.

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.