{"uuid": "fc26db37-b60e-49ff-8d65-59a724e248d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116691909326433179", "content": "@wdormann From what I read in the writeup (and the sparse other sources), you need a long enough DNS name on the victim host to trigger the overflow. I think 54 chars or more? This github has a possible explanation why the PoC fails under most normal conditions: https://github.com/ADScanPro/CVE-2026-41089-LongLogon", "creation_timestamp": "2026-06-04T12:47:10.875590Z"}