As of June 9, 2026, CVE-2026-45648 is listed by Microsoft as a Windows Active Directory Domain Services remote code execution vulnerability, but the public advisory material available around it exposes more about scoring confidence than about the bug’s root cause, exploit path, or operational...