CRITICALZero Day
Global

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Monday, April 6, 2026 at 07:19 PM UTC·Source: BleepingComputer

Updated: Monday, April 6, 2026 at 07:20 PM UTC

Executive Summary

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. [...]

Analysis

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. [...]
Source Attribution

Originally published by BleepingComputer on Apr 6, 2026.

Related Threats

CRITICALZero Day

Fortinet customers confront actively exploited zero-day, with a full patch still pending

Two critical defects in FortiClient EMS have been exploited in the past couple weeks. Experts push for users to apply an immediate hotfix. The post Fortinet customers confront actively exploited zero-day, with a full patch still pending appeared first on CyberScoop .

CyberScoop
CRITICALZero Day

Fortinet Issues Emergency Patch for FortiClient Zero-Day

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have been exploited in the wild.

CVE-2026-35616
Dark Reading
CRITICALZero Day

Attackers Target Zero-Day Flaw in Fortinet Security Software

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/attackers-target-zero-day-flaw-in-fortinet-security-software-image_small-2-a-31344.jpg" align=right hspace=4><b>Vendor Issues Hotfix for Critical Flaw in FortiClient Endpoint Management Server</b><br>Fortinet's endpoint management security server software is under fire from attackers, who are actively targeting two critical flaws,

Bank Info Security