Critical Windows Server Vulnerability CVE-2026-41089 Under Active Exploitation (heise.de)

• Belgian CCB warns of active exploitation of Windows Netlogon vulnerability
• CVE-2026-41089: CLDAP buffer overflow enables remote code execution (CVSS 9.8)
• Apply Microsoft May 12 patches immediately; check logs for signs of compromise

"The Belgian Cyber Security Board (CCB) warns that attackers are actively exploiting a critical vulnerability in Windows Server Netlogon. CVE-2026-41089, a stack-based buffer overflow in CLDAP over UDP, enables remote code execution with a CVSS score of 9.8. Microsoft released patches on May 12, 2026. Administrators must apply updates immediately and check for signs of compromise."