CVE-2026-49179

Improper neutralization of special elements used in a command (command injection) in Windows Active Directory allows an unauthorized attacker to execute code over a network.

Risk of an unauthorized attacker gaining control over Active Directory, potentially leading to full infrastructure compromise.

Apply available security updates from the vendor and restrict network access to Active Directory services.