Executive Summary

CyberKendra reports that researcher Chaotic Eclipse released FalconFlank, a proof‑of‑concept zero‑day that escalates privileges on fully patched Windows machines running CrowdStrike Falcon. The exploit code was posted to GitHub on September 3 2026 without prior notice to CrowdStrike. No CVE ID has been assigned.

---

Intelligence Metadata - Source Publisher: DataBreaches.net - Published Date: 2026-09-05T15:41:50+00:00 - Category: vulnerabilities

Original Description: CyberKendra reports: A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges on fully patched Windows machines running CrowdStrike Falcon. The researcher — who also uses the aliases Nightmare-Eclipse, MSNightmare, and INFINITE NIGHTMARE — published working exploit code to GitHub on September 3, 2026, without giving CrowdStrike advance notice. No CVE ID... Source

"I have always thought the actions of men the best interpreters of their thoughts."

— John Locke