<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cfapi — PoC Archive</title><link>https://poc.intelseclab.com/tags/cfapi/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 11 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/cfapi/index.xml" rel="self" type="application/rss+xml"/><item><title>Windows Defender — ShieldBreak: RoguePlanet (CVE-2026-50656) Patch Bypass via Cloud Files Rehydration + Object Manager Symlinks</title><link>https://poc.intelseclab.com/pocs/binary/2026-08-11_shieldbreak-defender-rogueplanet-patch-bypass/</link><pubDate>Tue, 11 Aug 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-08-11_shieldbreak-defender-rogueplanet-patch-bypass/</guid><description>High severity (CVSS 7.8) — binary · Bypass of CVE-2026-50656 (RoguePlanet); no CVE assigned to ShieldBreak as of 2026-08-11. Status: Unpatched. Affects: Microsoft Windows Defender (Antimalware Service Executable / MsMpEng.exe), threat remediation subsystem. Tags: windows, windows-defender, lpe, privilege-escalation, 0day, patch-bypass, cloud-files, cfapi, object-manager, symlink, wer, dll-sideload, CWE-59, CWE-426, microsoft, rogueplanet, shieldbreak.</description><category>binary</category><category>High</category><category>windows</category><category>windows-defender</category><category>lpe</category><category>privilege-escalation</category><category>0day</category><category>patch-bypass</category><category>cloud-files</category><category>cfapi</category><category>object-manager</category><category>symlink</category><category>wer</category><category>dll-sideload</category><category>CWE-59</category><category>CWE-426</category><category>microsoft</category><category>rogueplanet</category><category>shieldbreak</category></item></channel></rss>