Active Exploitation of Critical Windows Netlogon RCE (CVE‑2026‑41089) Targets Domain Controllers
The Centre for Cybersecurity Belgium (CCB) warns that CVE‑2026‑41089, a critical Remote Code Execution bug in Windows Netlogon, is now being actively exploited. The unauthenticated flaw lets attackers send crafted network packets to domain controllers and gain SYSTEM‑level code execution. Patches are available for all Windows Server versions from 2012 onward.