ShieldBreak is a Windows Defender bypass exploit demonstrating a patch bypass for the RoguePlanet vulnerability (CVE-2026-50656). It uses Cloud Files API callbacks during file scanning to achieve 100% success rate on Windows 11 and Server 2025.
  • C++ 98.7%
  • C 1.3%
Find a file
INFINITE NIGHTMARE be016d8c18
Update README.md
2026-08-11 21:46:00 +02:00
eicar_com.zip Add files via upload 2026-08-11 21:37:22 +02:00
LICENSE Initial commit 2026-08-11 21:35:38 +02:00
README.md Update README.md 2026-08-11 21:46:00 +02:00
Report.wer Add files via upload 2026-08-11 21:37:22 +02:00
resource.h Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.aps Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.cpp Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.rc Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.slnx Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.vcxproj Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.vcxproj.filters Add files via upload 2026-08-11 21:37:22 +02:00
ShieldBreak.vcxproj.user Add files via upload 2026-08-11 21:37:22 +02:00
shlbrk.ico Add files via upload 2026-08-11 21:37:22 +02:00
Warden.dll Add files via upload 2026-08-11 21:37:22 +02:00

ShieldBreak - Windows Defender 0day vulnerability

Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass.

Untitled

The PoC was tested in the latest version of windows 11 25h2 (+Canary channel) and windows server 2025, the PoC also have a 100% success rate. Please note that Windows 10 (and respective server editions) are not currently supported, they are however vulnerable to ShieldBreak as well.