SecurityOnlineDdos
Netlogon RCE bug CVE-2026-41089 exposes domain controllers
The article highlights an active security exploit targeting corporate networks through a critical Netlogon Remote Code Execution (RCE) vulnerability, designated as CVE-2026-41089, with a CVSS score of 9.8. Attackers can control domain controllers by sending crafted requests, allowing code execution without user interaction. Microsoft has issued a patch for this flaw as part of its May 2026 Patch Tuesday update, addressing a total of 118 vulnerabilities.
System administrators are advised to apply fixes, isolate affected servers from untrusted networks, and monitor traffic for unusual requests to prevent exploitation. Continuous patch management is emphasized as crucial for long-term security.
Story timeline CVE-2026-41089
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 12 May · 19:20 UTC | SANS ISC | Microsoft May 2026 Patch Tuesday, (Tue, May 12th) |
| Tue 12 May · 21:31 UTC | Dark Reading | Microsoft Patch May 2026 fixes 137 bugs, zero day free |
| Tue 12 May · 22:10 UTC | Krebs on Security | Patch Tuesday, May 2026 Edition |
| Wed 13 May · 02:31 UTC | Rapid7 | Microsoft Patch Tuesday patches Netlogon and DNS RCE flaws |
| Wed 13 May · 08:31 UTC | Infosecurity | Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEs |
| Wed 13 May · 12:11 UTC | SOCRadar | May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days |
| Wed 13 May · 20:32 UTC | Security Affairs | Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming |
| Mon 1 Jun · 02:47 UTC | SecurityOnline | Netlogon RCE bug CVE-2026-41089 exposes domain controllers (this article) |
| Mon 1 Jun · 15:21 UTC | SecurityWeek | Belgium flags active exploitation of CVE-2026-41089 Netlogon flaw |