NewsBite analysis · Security
BleepingComputer
Microsoft patches RoguePlanet Defender zero-day vulnerability
Microsoft has patched the RoguePlanet zero-day vulnerability affecting Defender, discovered by a researcher amidst a dispute with the company regarding vulnerability disclosures. This flaw permits attackers to execute commands with SYSTEM privileges on Windows 10 and 11 systems, raising concerns about the security practices of major software providers. The patch aims to mitigate the risk posed by this exploit, which has been demonstrated with varying success across different devices. The ongoing tension between the researcher and Microsoft also underscores the complexities of bug bounty programs.
Act nowConfidence: HighImmediate horizonCybersecurity risk: High
Published 9 Jul 2026, 06:50 UTC2 min read
Visit original article ↗Lead image — BleepingComputer
Summary
TL;DR
- Zero-day vulnerability tracked as CVE-2026-50656 reported by researcher Nightmare Eclipse.
- RoguePlanet allows command prompt access with SYSTEM privileges on Windows 10 and 11.
- Microsoft has responded with an update to the Microsoft Malware Protection Engine.
- Vulnerability disclosure has caused tensions with Microsoft, leading to threats of legal action against the researcher.
- Over recent months, multiple zero-day vulnerabilities have been disclosed by the same researcher.
Interesting facts
- RoguePlanet was part of an ongoing dispute over Microsoft's bug bounty program.
- The exploit's success rate varies significantly between different machines.