Exploited vulnerabilitiesBriefConfirmed by two or more outlets
Windows Netlogon unauthenticated RCE on domain controllers (CVE-2026-41089)
Exploitation confirmed by Belgium’s CCB.
- Disclosed
Live scores
Live scores
CVE-2026-41089- EPSS
- 0.796
very likely to be attacked soon - VEDAS
- 0.977
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.