netlogon rce

Patch CVE-2026-41089 first on any domain controller that is reachable from outside the tightly controlled server networks you trust: internet-facing paths, partner routes, broad VPN pools, lab networks, DMZ routes, contractor networks, unmanaged client networks, or legacy firewall exceptions...