A critical stack-based buffer overflow vulnerability in the Windows Netlogon service is currently being exploited in active cyberattacks. Identified as CVE-2026-41089, this flaw allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on targeted domain controllers. The exploit is particularly dangerous because it requires zero user interaction and can be triggered by sending a specially crafted network request. Source
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
