Tag

domain-controller

Safeguard articles tagged "domain-controller" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2026-41089: The Unauthenticated Netlogon RCE That Owns Your Domain Controller

CVE-2026-41089 is a CVSS 9.8 unauthenticated remote code execution flaw in Windows Netlogon: an integer overflow in MS-NRPC handshake parsing leads to a stack overflow on domain controllers, with no credentials or user interaction required.

May 14, 202612 min read