cybercrime.clubhttps://cybercrime.club/tags/domain-controller/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 13 May 2026 23:08:45 -0400Windows Netlogon CVE-2026-41089: Unauthenticated RCE on Every Domain Controllerhttps://cybercrime.club/posts/windows-netlogon-cve-2026-41089-unauth-rce-domain-controller/Wed, 13 May 2026 23:08:45 -0400https://cybercrime.club/posts/windows-netlogon-cve-2026-41089-unauth-rce-domain-controller/May Patch Tuesday's marquee bug is a stack-based buffer overflow in MS-NRPC that hands SYSTEM on any domain controller reachable over the network. Patch DCs first, before anything else.vulnerabilities