🚨 CVE-2026-41089 — Windows Netlogon RCE (CVSS 9.8 Critical)

Microsoft Windows Netlogon servisida aniqlangan ushbu zaiflik CLDAP (UDP/389) so‘rovlarini qayta ishlashdagi Stack Buffer Overflow sabab yuzaga keladi.

🔹 Zaiflik turi: Remote Code Execution (RCE)
🔹 CVSS: 9.8 Critical
🔹 Authentication talab qilinmaydi
🔹 User interaction talab qilinmaydi

Hujumchi maxsus tayyorlangan CLDAP paket yuborish orqali Domain Controller'da SYSTEM huquqlari bilan kod bajarishi yoki LSASS xizmatini ishdan chiqarishi mumkin.

Ta'siri:
• Domain Controller komprometatsiyasi
• Active Directory nazoratini yo‘qotish
• Privilege Escalation
• Lateral Movement
• Butun domen infratuzilmasining egallanishi

🎯 Ta'sirlangan tizimlar:
• Windows Server 2012 / 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

🛡 Tavsiya:
Microsoft tomonidan chiqarilgan 2026-yil May xavfsizlik yangilanishlarini zudlik bilan o‘rnatish hamda Domain Controller'larda LDAP/CLDAP trafiklarini monitoring qilish tavsiya etiladi.

Public exploit mavjud‼️

#CVE2026 #Windows #Netlogon #RCE #ActiveDirectory #CWG