CVE-2026-72982 – Windows Netlogon Remote Code Execution Vulnerability
CVSS 9.8
CRITICAL
Critical - Same Day Deployment
“A single malicious network packet could turn this Netlogon flaw into remote code execution, without authentication or user interaction.”
CVE-2026-72982 is a critical stack-based buffer overflow vulnerability in Windows Netlogon. An unauthenticated attacker can send a specially crafted packet to an affected service over the network and potentially execute code on the target system. The vulnerability requires no privileges or user interaction and can result in high impact to confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-121
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.