VulnSocial

CVE-2025-49716Exploit(microsoft / windows_server_2008)

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

microsoft CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_server_2008
  • windows_server_2012
  • windows_server_2016
  • windows_server_2019

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Exploit: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
microsoft
Products
windows_server_2008windows_server_2012windows_server_2016windows_server_2019windows_server_2022windows_server_2022_23h2

2 versions affected across 6 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-16: 1PoC Mentioned / Linked · 2026-04-16: 1Technical Details · 2026-04-16: 104-16
Signal classification1 categories
Exploit
1100.0%
Referenced assets1 URL
Full discourse1 post
  • UNDERCODE TESTING@UndercodeUpdate
    Exploit

    🚨 #CVE-2025-49760 & #CVE-2025-49716: #Windows RPC Poisoning and Netlogon Hardening – The Active Directory Takeover Threat + Video https://undercodetesting.com/cve-2025-49760-cve-2025-49716-windows-rpc-poisoning-and-netlogon-hardening-the-active-directory-takeover-threat-video/ Educational Purposes!

    Post summary

    The post provides a video demonstration of Windows RPC poisoning and Netlogon hardening vulnerabilities (CVE‑2025‑49760 & CVE‑2025‑49716) that can enable Active Directory takeover, but it offers no evidence of active exploitation, patches, or detailed exploit code.

    00000326
    491 followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_server_2008--x64
OSmicrosoftwindows_server_2008--x86
OSmicrosoftwindows_server_2008r2-x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2022_23h2---

Explore more

Back to dashboardmicrosoft CVEswindows_server_2008 vulnerabilities