Nightmare Eclipse has dropped the LegacyHive zero-day exploit, a privilege escalation in the Windows User Profile Service.

LegacyHive is a PoC for a Windows ProfSvc privilege escalation flaw that works after the July 2026 update, but the public build needs extra credential

Experts say it’s a useful post-compromise tool, for those with the brain cells required to put it together