TL ;DR Synacktiv publicly disclosed a new NTLM reflection bypass tracked as CVE-2026-24294. The flaw gives a local user
NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit
CyberSIXT Evidence Panel
Source marked as original reporting
Article by CyberSIXT