CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

**Executive Summary:** ShieldBreak (CVE-2026-69414) is a zero-day elevation-of-privilege flaw in the Microsoft Malware Protection Engine that allows a low-privileged local attacker to achieve NT AUTHORITY\SYSTEM; a public PoC was released on August 12, 2026, no Microsoft patch is yet available, and Qualys provides detection via VMDR and an interim mitigation via TruRisk Eliminate.