CRITICAL 9.8 Microsoft PoC

CVE-2026-41089

Windows Netlogon Remote Code Execution Vulnerability

Microsoft Security Update 2026-May: Windows Netlogon Remote Code Execution Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2016

References

Published: 2026-05-12 · Source: Microsoft · Feed updated: 2026-09-18

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-05-12 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 79.6% (top 0% of all CVEs by exploitation probability). Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

Risk Timeline

CVE Disclosed2026-05-12 · 128 days ago

Public PoC Exploit AvailableWeaponised proof-of-concept code is publicly accessible

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2026-41089

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	CRITICAL	9.9
CVE-2025-50165 PoC	Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2025-53766	GDI+ Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62815	Microsoft QUIC Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62878	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62893	Windows Deployment Services TFTP Server Remote Code Execution Vulnerability	CRITICAL	9.8

vulnfeed aggregates 14649 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.