← Back to Feed

LegacyHive: Nightmare-Eclipse’s Latest Zero-Day Drop with a Stripped PoC

July 20, 2026 · LevelBlue SpiderLabs · Severity: CRITICAL

Vexed researcher Nightmare-Eclipse (aka Chaotic Eclipse, Dead Eclipse, and MSNightmare) released his ninth unpatched Windows vulnerability called LegacyHive.

Key Takeaways

  • Vexed researcher Nightmare-Eclipse (aka Chaotic Eclipse, Dead Eclipse, and MSNightmare) released his ninth unpatched Windows vulnerability called Lega.
  • This latest bug drop is a Local Privilege Escalation (LPE) vulnerability affecting Windows User Profile, a component responsible for loading and unloa.
  • When exploited, LegacyHive can enable attackers to load other users’ hives and gain access to application data and Windows Explorer history, among oth.
☕ Buy a Coffee