CVE-2026-1680
NoneCVSS
—
EPSS
0.2%
Published
Jan 30, 2026
CISA due date
—
The record
Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group membership restrictions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250
- CVE-2026-69464 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-69409 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-80238 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-83534 PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel()… CWE-250
- CVE-2026-72654 Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature… CWE-250
- CVE-2026-70496 A flaw was found in search-v2-operator. CWE-250