Vulnerability in NordVPN software

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.8, CVEs: CVE-2026-106030, Summary: The vulnerability CVE-2026-106030: NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe \\.\pipe\nord-security\v1\NordVpnService\Server. The attacker can…

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první 16. 10. 2026 10:55 CZ · EN/orig

NordVPN FI PL

tg: zranitelnost

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-106030	6.8 4.0 · CERT-PL	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 6.8.

Jak se o tom psalo 2

19. 10. 2026 · zachyceno 04:00 · NCSC-FI FI nadpis události

Vulnerability in NordVPN software

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.8, CVEs: CVE-2026-106030, Summary: The vulnerability CVE-2026-106030: NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe \\.\pipe\nord-security\v1\NordVpnService\Server. The attacker can…
16. 10. 2026 10:55 · CERT Polska PL

Vulnerability in NordVPN software

Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.