Microsoft patches a wormable Windows DNS Server RCE, six years after SigRed
September 2026’s Patch Tuesday, the largest in Microsoft’s history, closes a wormable RCE in Windows DNS Server, the first SigRed-class flaw since 2020. Isolate and patch your exposed DNS, DHCP and multicast servers first.