Vulnerabilitiesadvisory
2026-007: Critical Vulnerability in Windows Netlogon
From the publisher
On 12 May 2026, Microsoft published a security advisory addressing a critical vulnerability affecting Windows Server when acting as a domain controller. This vulnerability allows an unauthenticated attacker to execute arbitrary code over a network. According to The Centre for Cybersecurity Belgium (CCB), this vulnerability is currently exploited by threat actors. It is strongly recommended updating affected Windows servers as soon as possible.
Source CERT-EUCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Read full article

