ShieldBreak: NightmareEclipse Completes the RoguePlanet Exploit

Last Updated: 2026-08-12T15:42:00Z

CVSSv3: N/A

What’s Happening

Right on schedule, our old pal NightmareEclipse has dropped the latest Windows 0-day.

The code is hosted in multiple locations, including GitHub.

This appears to be the full exploit of the vulnerability initially demonstrated in RoguePlanet.

Will Dormann confirms the exploit works on patched Windows 11.

As the nature of the vuln suggests, Defender must be enabled for the exploit to work.

Actions

Wait for a patch? And potentially watch for the compiled exploit file write.

Indicators

Value Type Description
4e3146d667812ace49638e15f9dbb37b9e13f7222ed4984e065723715c692338 SHA256 ShieldBreak.exe compiled hash
2 Likes