CVE-2026-45648: The NSPI RPC Flaw in Every Domain Controller, and How to Check If You Are Exposed CVE-2026-45648 is an authenticated RCE in Active Directory Domain Services via the NSPI RPC interface, CVSS 8.8. Here is how to check patch status and mitigate. Oct 9, 2026 5 min read Active Directory
