ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI disclosed a CVSS 7.8 named-pipe permission flaw in NoMachine that allows local privilege escalation.
Stories per day · 30 days
3 RSS
4 stories, newest first · one card per story
Stories tagged #named-pipe
New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory
Researcher details Windows console named-pipe injection that avoids VirtualAllocEx and WriteProcessMemory EDR checks.
13
Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM on vulnerable Veeam Agent for Windows.
2
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC for CVE-2026-32996 lets low-privileged local users gain SYSTEM on Veeam Agent for Windows; patch to 13.0.2.29 or later.
4