Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202
CVE-2026-32202 actively exploited after April 27 advisory fix, exposing NTLMv2 hashes via zero-click SMB authentication.
More info