PatchSiren

Nord Security CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Nord Security CVE published 2026-10-16

CVE-2026-106030

CVE-2026-106030: NordVPN for Windows Local Privilege Escalation Vulnerability. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe '\\.\pipe\nord-security\v1\NordVpnService\Server'. The attacker can then invoke the 'ISettingsGrpc.StopService' and 'ISettingsGrpc.ChangeServiceStartType' methods with an arbit [truncated]