Will the Windows LegacyHive zero-day be actively exploited in the wild by end of August 2026?

A researcher under the handle 'Nightmare Eclipse' has publicly released a Windows zero-day exploit named LegacyHive enabling admin privilege escalation on current Windows systems. The public PoC and severity raise exploitation risk. (Source: Bleeping Computer, July 2026)

Resolution Criteria

YES if CISA, Microsoft, reputable security researchers, or major endpoint/SIEM vendors publicly confirm active exploitation in the wild or add to KEV; NO if 90 days pass with no confirmed wild exploitation.