Security researchers disclosed a critical zero-day affecting Windows Server 2025 that allows remote code execution without authentication.

Microsoft has acknowledged the flaw and issued emergency mitigations while a full patch is prepared.