Critical Windows Netlogon Vulnerability Actively Exploited by Attackers
A critical vulnerability in Windows Netlogon, identified as CVE-2026-41089, is being actively exploited by threat actors for remote code execution. The vulnerability, a stack-based buffer overflow, was disclosed in May 2026 and affects Windows servers acting as domain controllers. The Centre for Cybersecurity Belgium has issued a warning, urging immediate patching to prevent exploitation. The vulnerability allows attackers to execute arbitrary code with system privileges, posing a significant security risk.