CRITICAL 9.8 Microsoft PoC

CVE-2026-41089

Windows Netlogon Remote Code Execution Vulnerability

Microsoft Security Update 2026-May: Windows Netlogon Remote Code Execution Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2016

References

Published: 2026-05-12 · Source: Microsoft · Feed updated: 2026-08-04

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-05-12 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 79.6% (top 0% of all CVEs by exploitation probability). Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

Risk Timeline

CVE Disclosed2026-05-12 · 83 days ago

Public PoC Exploit AvailableWeaponised proof-of-concept code is publicly accessible

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2026-41089

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	CRITICAL	9.9
CVE-2026-42990	SQL Server ODBC driver Elevation of Privilege Vulnerability	CRITICAL	9.8
CVE-2026-49172	Windows FTP Service Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-54990	Remote Desktop Client Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-50447	Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-50518	Windows DHCP Server Remote Code Execution Vulnerability	CRITICAL	9.8

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.