NordVPN patches Windows flaw that let attackers stop services
Nord Security released a Windows app update fixing CVE-2026-106030, rated CVSS 6.8. A local low-privileged attacker could abuse a named pipe to stop unprotected Windows services or change their startup type. The flaw is fixed in version 8.12.0.0, with no active exploitation reported.
- CVE-2026-106030 carries a CVSS v4 score of 6.8
- Fix shipped in NordVPN 8.12.0.0 and later
- Exploitation requires local access and existing malware
- Windows Defender and Tamper Protection are unaffected
Read next
Security