{"schema":"vulnpedia.poc/1","cve":"CVE-2026-41091","kev":{"since":"2026-05-20","ransomware":false},"epss":{"score":0.08202,"percentile":0.94838},"cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-41091/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"generated":"2026-10-26T06:59:15.268Z","has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f05609d99a35","executable":false,"sourceId":"f05609d99a35","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f05609d99a35","modified":"2026-05-19T00:00:00Z","url":"https://vulncheck.com/xdb/f05609d99a35"}],"repositoryUrl":"https://github.com/s4m98/RedSun-"}],"poc_candidates":[{"url":"https://github.com/0xBlackash/CVE-2026-41091","source":"poc-in-github","sourceId":"CVE-2026-41091","description":"CVE-2026-41091","modified":"2026-09-26T13:09:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-41091","url":"https://github.com/0xBlackash/CVE-2026-41091"},{"source":"poc-in-github","sourceId":"CVE-2026-41091","modified":"2026-09-26T13:09:59Z","url":"https://github.com/0xBlackash/CVE-2026-41091"}],"tags":[]},{"url":"https://github.com/ridhinva/defender-privilege-escalation-scanner","source":"poc-in-github","sourceId":"CVE-2026-41091","description":"Scanner: CVE-2026-41091/45498 Microsoft Defender LPE/DoS — Python scanner for Windows Defender privilege escalation (CISA KEV)","modified":"2026-08-07T20:36:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-41091","url":"https://github.com/ridhinva/defender-privilege-escalation-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-41091","modified":"2026-08-07T20:36:44Z","url":"https://github.com/ridhinva/defender-privilege-escalation-scanner"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit","source":"poc-in-github","sourceId":"CVE-2026-41091","description":"CVE-2026-41091 RedSun | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\\SYSTEM - via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights - Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. Educational & Legal uses only.","modified":"2026-10-16T21:27:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-41091","url":"https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-41091","modified":"2026-10-16T21:27:15Z","url":"https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit"}],"tags":[]},{"url":"https://github.com/s4m98/RedSun-","source":"poc-in-github","sourceId":"CVE-2026-41091","description":"Windwos Zero Day Local PrivESc Exploit (CVE-2026-41091)","modified":"2026-08-09T14:02:19Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-41091","url":"https://github.com/s4m98/RedSun-"},{"source":"poc-in-github","sourceId":"CVE-2026-41091","modified":"2026-08-09T14:02:19Z","url":"https://github.com/s4m98/RedSun-"}],"tags":[]}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-41091%22&type=repositories","executable":false}]}