CVE-2026-106030

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...

CVE-2026-106030 Missing Authorization in NordVPN for Windows

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...

CVE-2026-106030

The NordVPN for Windows user-mode application contains a missing authorization vulnerability where a low-privileged local attacker can connect to the named pipe \.\pipe\nord-security\v1\NordVpnService\Server. By acting as a trusted process, an attacker can invoke the ISettingsGrpc.StopService and...

CVE-2026-106030 Missing Authorization in NordVPN for Windows

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...

EUVD-2026-102833

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...

CVE-2026-106030: Incorrect Authorization

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...

PT-2026-115572

Name of the Vulnerable Software and Affected Versions NordVPN for Windows versions prior to 8.12 Description A low-privileged local attacker can connect to the named pipe ".pipe ord-securityv1NordVpnServiceServer" by acting as a trusted process. This allows the attacker to invoke the...

Nord Security NordVPN Authorization Issue Vulnerability

Nord Security’s NordVPN versions prior to 8.12 have a vulnerability related to authorization. This vulnerability stems from improper access control in named pipes. A low-privilege attacker can connect to the named pipe “\.\pipe\nord-security\v1\NordVpnService\Server”, call the methods...