CVE-2026-1680 - Local Privilege Escalation in Local Admin Service

CVE-2026-1680 - Local Privilege Escalation in Local Admin Service

CVE ID : CVE-2026-1680 Published : Jan. 30, 2026, 7:16 a.m. | 57 minutes ago Description : Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group membership restrictions. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Jan. 30, 2026
Affected Product: Windows
Attack Vector: Local