cve-2026-41089

Patch CVE-2026-41089 first on any domain controller that is reachable from outside the tightly controlled server networks you trust: internet-facing paths, partner routes, broad VPN pools, lab networks, DMZ routes, contractor networks, unmanaged client networks, or legacy firewall exceptions...

CVE-2026-41089 is a Microsoft-disclosed Windows Netlogon remote code execution vulnerability published in the Security Update Guide on May 12, 2026, affecting the authentication plumbing Windows domains use to establish trusted communication between domain-joined machines and domain controllers...